Network Access Device Administration

Which menu path in Cisco ISE is used to define a new Network Device Group?

What is the primary function of the TACACS+ 'Shared Secret' configured on both the Cisco ISE and the Network Access Device?

You need to ensure that TACACS+ authentication requests for network devices are only accepted if the device IP matches a specific Network Device Group. Where do you configure the Device Type condition?

A network engineer reports that they can log into a switch via TACACS+, but cannot run any commands. What is the most likely cause?

You want to use TACACS+ for administrative access. Which protocol feature distinguishes TACACS+ from RADIUS for device administration?

When defining a Shell Profile for a TACACS+ administrator, which setting ensures the user is placed into privilege level 15 immediately upon login?

When troubleshooting TACACS+ authentication issues in Cisco ISE, which log file should you monitor to see the specific request details and the policy match result?

You are configuring a TACACS+ command set to restrict an administrator from running 'show running-config' on Cisco switches. Which match condition ensures that this specific command is blocked while allowing other 'show' commands?

Which port does Cisco ISE use by default for TACACS+ communication with network devices?

If a user is assigned a Shell Profile with a specific 'Auto-Command' configured, what happens when they log into the network device?

When adding a network device to ISE, you select the 'TACACS+ Authentication Settings' checkbox. What is the impact of this action?

You are configuring a policy to allow 'Read-Only' access for junior admins. You have created a Command Set that allows 'show' commands. What else is required to implement 'Read-Only' access correctly?

You are troubleshooting a scenario where an admin cannot execute a specific command despite the Command Set having 'Permit' for that command. What is a common reason?

How does Cisco ISE handle requests that do not match any configured TACACS+ Authorization Policy?

Which attribute in a Shell Profile is used to control whether a user can perform 'enable' commands?

In the context of TACACS+, what is the purpose of the 'Network Device Group'?

Where are the TACACS+ accounting logs stored and viewed in the ISE management console?

How can you verify that ISE is receiving TACACS+ requests from a specific switch?

What is the benefit of using multiple TACACS+ Policy Sets?

You need to allow users to run commands that start with 'show' but deny any 'show' commands that contain 'password'. How should the Command Set be configured?

A user is assigned a Command Set that permits all commands, but they are still receiving 'Access Denied' when running 'reload'. What is the most likely reason?

If a user is authenticated via TACACS+ but no authorization policy matches, what is the default behavior?

Which component in Cisco ISE defines the TACACS+ privilege levels and attributes sent to the network device?

Which of the following is a best practice when configuring TACACS+ for network administration?

What is the maximum number of TACACS+ servers you can configure on a Cisco device for redundancy?

Which TWO of the following are true regarding TACACS+ command sets? (Choose two)

Which THREE of the following are characteristics of the TACACS+ protocol? (Choose three)

Which TWO of the following are valid ways to define conditions in a TACACS+ Policy Set? (Choose two)

Which statement best describes the role of the TACACS+ 'Accounting' feature?

When configuring a Shell Profile, what is the purpose of the 'Common Tasks' section?

Which TWO of the following are valid components of a TACACS+ Authorization Policy in Cisco ISE? (Choose two)

When setting up TACACS+ for network administration, which THREE configurations must be present on the Cisco network device? (Choose three)

Which THREE of the following are valid actions when configuring a Command Set for a user? (Choose three)

Which TWO of the following are true about Shell Profiles? (Choose two)

Which TWO of the following are benefits of using Network Device Groups (NDG)? (Choose two)

Which THREE of the following items are considered 'results' in an ISE authorization policy? (Choose three)

Which THREE of the following are reasons why a TACACS+ authorization request might fail? (Choose three)

You are configuring a Network Device Group in Cisco ISE to organize devices by geographical location. Which menu path should you navigate to in order to create a new Network Device Group?

A network administrator needs to restrict access so that engineers can only run 'show' commands on core switches via TACACS+. How should the Command Set be configured?

You are implementing TACACS+ device administration for a group of routers. You need to assign specific privilege levels to different users. Where in the ISE policy set is this privilege assignment configured?

An administrator notices that TACACS+ authentication is failing for devices. The logs show 'RADIUS request received'. What is the most likely cause?

You are troubleshooting a TACACS+ issue where a user can log in but cannot execute any commands. The policy set hits the correct rule. What is the most likely reason?

When configuring a Shell Profile for TACACS+, which of the following attributes can be controlled to limit how long a session stays active without input?

Which component in ISE is responsible for mapping an authenticated user to a specific set of permissions and command restrictions in a TACACS+ environment?

Which TWO of the following are true regarding the configuration of Command Sets in Cisco ISE?

Which THREE items are configurable within a TACACS+ Shell Profile in Cisco ISE?

Which TWO methods can be used to verify that a TACACS+ request from a network device is reaching the Cisco ISE PSN?