Question 6 of 384
What is a requirement for Feed Service to work?
Answer

Suggested Answer

The suggested answer is D.

For the Feed Service to function, Cisco ISE needs Internet access to download feed updates. This allows the system to regularly update and maintain the most current profiles and policies necessary for network security and device profiling.

Community Votes20 votes
DSuggested
75%
C
15%
B
10%
Question 7 of 384
What is a method for transporting security group tags throughout the network?
Answer

Suggested Answer

The suggested answer is B.

The correct method for transporting security group tags throughout the network is by using the Security Group Tag Exchange Protocol. This protocol is specifically designed to form peer relationships and exchange security-related data, including security group tag mappings and policies, across various network devices. It is particularly useful in environments where direct TrustSec client relationship or a contiguous security group access control list (SGACL) domain is not possible.

Community Votes3 votes
BSuggested
100%
Question 8 of 384
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?
Answer

Suggested Answer

The suggested answer is A.

The Monitoring and Troubleshooting (MnT) node is designed for storing logs and other monitoring data, which can occupy a large amount of disk space. Therefore, it requires the largest amount of storage among the different personas in a Cisco ISE deployment.

Community Votes7 votes
ASuggested
57%
C
29%
B
14%
Question 9 of 384
In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)
Answer

Suggested Answer

The suggested answer is C, E.

In a standalone Cisco ISE (Identity Services Engine) deployment, a node can be configured with multiple personas. The two relevant personas for this type of setup are the Administration persona and the Policy Service persona. The Administration persona is responsible for the administrative and management functions of Cisco ISE, such as configuring settings and managing policies. The Policy Service persona handles the policy enforcement, protocols, and network access control services. These two roles are essential for the functioning of a standalone deployment and are hence the correct options.

Community Votes2 votes
CESuggested
100%
Question 10 of 384
A network engineer must enforce access control using special tags, without re-engineering the network design.
Which feature should be configured to achieve this in a scalable manner?
Answer

Suggested Answer

The suggested answer is C.

Scalable Group Tags (SGT) are specifically designed to enforce access control using tags, allowing for a flexible and scalable approach to network security without requiring changes to the network design. They enable the application of security policies based on the identity and role of users or devices, which aligns perfectly with the requirement of the question.

Community Votes4 votes
CSuggested
100%