NO.67 An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

NO.68 What is a function of client provisioning?

NO.69 An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this’?

NO.70 By default, which traffic does an 802.IX-enabled switch allow before authentication?

NO.71 Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

NO.72 Drag and drop the configuration steps from the left into the sequence on the right to install two Cisco ISE nodes in a distributed deployment.

NO.73 An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’.
Which two actions occur within Cisco ISE as a result of this action? (Choose two)

NO.74 The security team wants to secure the wired network. A legacy printer on the network with the MAC address 00:43:08:50:64:60 does not support 802.1X. Which setting must be enabled in the Allowed Authentication Protocols list in your Authentication Policy for Cisco ISE to support MAB for this MAC address?

NO.75 What is a difference between TACACS+ and RADIUS in regards to encryption?

NO.76 Refer to the exhibit. An engineer is creating a new TACACS+ command set and cannot use any show commands after logging into the device with this command set authorization.
Which configuration is causing this issue?

NO.77 An engineer is working on a switch and must tag packets with SGT values such that it learns via SXP. Which command must be entered to meet this requirement?

NO.78 An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an “EAP-TLS authentication failed” message when moving between remote sites.
Which configuration must be applied on Cisco ISE?

NO.79 An employee must access the internet through the corporate network from a new mobile device that does not support native supplicant provisioning provided by Cisco ISE. Which portal must the employee use to provision to the device?

NO.80 A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

NO.81 What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

NO.82 An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

NO.83 A network engineer is configuring a new certificate template on the internal CA within Cisco ISE to provision certificates to BYOD devices that must be enrolled in the network. What must be configured in the SAN field of the certificate to identify the devices after enrollment?

NO.84 An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’.
Which two actions occur within Cisco ISE as a result oí this action? (Choose two)