Network Access Device Administration

Which menu path in Cisco ISE is used to define a new Network Device Group?

When defining a Shell Profile for a TACACS+ administrator, which setting ensures the user is placed into privilege level 15 immediately upon login?

When troubleshooting TACACS+ authentication issues in Cisco ISE, which log file should you monitor to see the specific request details and the policy match result?

You are configuring a TACACS+ command set to restrict an administrator from running 'show running-config' on Cisco switches. Which match condition ensures that this specific command is blocked while allowing other 'show' commands?

Which port does Cisco ISE use by default for TACACS+ communication with network devices?

If a user is assigned a Shell Profile with a specific 'Auto-Command' configured, what happens when they log into the network device?

When adding a network device to ISE, you select the 'TACACS+ Authentication Settings' checkbox. What is the impact of this action?

You are troubleshooting a scenario where an admin cannot execute a specific command despite the Command Set having 'Permit' for that command. What is a common reason?

How does Cisco ISE handle requests that do not match any configured TACACS+ Authorization Policy?

Which attribute in a Shell Profile is used to control whether a user can perform 'enable' commands?

In the context of TACACS+, what is the purpose of the 'Network Device Group'?

Where are the TACACS+ accounting logs stored and viewed in the ISE management console?

How can you verify that ISE is receiving TACACS+ requests from a specific switch?

What is the benefit of using multiple TACACS+ Policy Sets?

A user is assigned a Command Set that permits all commands, but they are still receiving 'Access Denied' when running 'reload'. What is the most likely reason?

If a user is authenticated via TACACS+ but no authorization policy matches, what is the default behavior?

Which component in Cisco ISE defines the TACACS+ privilege levels and attributes sent to the network device?

Which of the following is a best practice when configuring TACACS+ for network administration?

Which TWO of the following are true regarding TACACS+ command sets? (Choose two)

Which THREE of the following are characteristics of the TACACS+ protocol? (Choose three)

Which statement best describes the role of the TACACS+ 'Accounting' feature?

When configuring a Shell Profile, what is the purpose of the 'Common Tasks' section?

Which TWO of the following are valid components of a TACACS+ Authorization Policy in Cisco ISE? (Choose two)

When setting up TACACS+ for network administration, which THREE configurations must be present on the Cisco network device? (Choose three)

Which TWO of the following are true about Shell Profiles? (Choose two)

Which TWO of the following are benefits of using Network Device Groups (NDG)? (Choose two)

Which THREE of the following items are considered 'results' in an ISE authorization policy? (Choose three)

You are configuring a Network Device Group in Cisco ISE to organize devices by geographical location. Which menu path should you navigate to in order to create a new Network Device Group?

You are implementing TACACS+ device administration for a group of routers. You need to assign specific privilege levels to different users. Where in the ISE policy set is this privilege assignment configured?

An administrator notices that TACACS+ authentication is failing for devices. The logs show 'RADIUS request received'. What is the most likely cause?

Which component in ISE is responsible for mapping an authenticated user to a specific set of permissions and command restrictions in a TACACS+ environment?

Which THREE items are configurable within a TACACS+ Shell Profile in Cisco ISE?

Which TWO methods can be used to verify that a TACACS+ request from a network device is reaching the Cisco ISE PSN?

A network engineer is adding a Cisco Catalyst 9300 switch to Cisco ISE for TACACS+ device administration. The switch will use a shared secret of 'C1sco123'. The engineer wants to ensure that ISE can authenticate and authorize administrative sessions from this device. Where should the shared secret be configured in ISE?

A network engineer is configuring a Cisco router to use TACACS+ for device administration with Cisco ISE. The engineer wants to ensure that if the TACACS+ server is unreachable, the router falls back to local authentication. Which command should be configured on the router?

A network engineer is deploying TACACS+ device administration with Cisco ISE for a large number of Cisco IOS routers. The engineer wants to centralize the authorization of commands so that users in different groups have different command privileges. The engineer has already configured authentication and authorization policy sets in ISE. Which additional configuration is required on the Cisco IOS routers to ensure that command authorization is enforced by ISE?

A network administrator is adding a new Cisco IOS router to Cisco ISE for TACACS+ device administration. The administrator needs to ensure that ISE recognizes the router and accepts its TACACS+ requests. What must be configured in ISE for the router?

A network engineer is troubleshooting a TACACS+ authentication failure on a Cisco switch. The switch is configured to use Cisco ISE as its TACACS+ server. The engineer runs 'debug tacacs' on the switch and sees that the request is sent but no response is received. Which action should the engineer take first to resolve the issue?

A network administrator is configuring a Cisco ISE TACACS+ Command Set to allow users to execute 'show running-config' but deny all other 'show' commands. Which command set configuration in ISE achieves this?