Cisco 500-254 Certification Practice Questions & Answers

Question 6 of 48

What is the process for Cisco ISE to obtain a signed certificate from a CA?

A.

Request a certificate from the CA, and import the CA-signed certificate into ISE.

B.

Generate a CSR; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.

C.

Generate a CSR; export the CSR to the local file system and send to the CA; download the certificate from the CA, and bind the CA-signed certificate with its private key.

D.

Submit a CSR to the CA; download the certificate from the CA; bind the CA-signed certificate

Question 7 of 48

What is the Cisco ISE default admin login name and password?

A.

admin/admin

B.

admin/cisco

C.

ISEAdmin/admin

D.

admin/no default password—the admin password is configured at setup

Question 8 of 48

What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)

A.

Use the Test Connection feature in the Cisco ISE External Identity Sources Active Directory.

B.

View the Active Directory Log /opt/CSCOcmp/logs/ad_agent.log.

C.

Use the ISE Dashboard Summary alarms.

D.

Use ktpass to determine if the Kerberos ticket is valid.

Question 9 of 48

Where is the license installed within Cisco ISE deployment?

A.

A license is installed on the Policy Service node within ISE deployment.

B.

A license is installed on the primary or secondary Administration node within ISE deployment.

C.

A license is installed only on the primary Administration node within ISE deployment.

D.

A license is preinstalled for ISE deployment.

Question 10 of 48

Which of these is NOT a high-availability option that is available for Cisco ISE deployments?

A.

In the event of failure of the Primary Administration node, the standby instance automatically becomes active.

B.

In the event of failure of the Primary Monitoring node, the standby instance automatically becomes active.

C.

Clustering of Policy Service nodes to provide N+1 redundancy

D.

Stateless failover of Inline Posture nodes