SISE Practice Test 10 — 10 Questions

Question 1

You are troubleshooting a scenario where an Android device is unable to complete the BYOD onboarding flow. You suspect the issue is with the supplicant provisioning wizard. Which tool should you use to verify if the provisioning payload was actually generated?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Work Centers > BYOD > Client Provisioning. The 'Provisioning' resources tab in the ISE portal configuration lists the resources generated for different operating systems.

Answer

Administration > System > Settings > Proxy

Answer

Operations > Troubleshoot > TCP Dump

Answer

Policy > Policy Elements > Conditions > Other > BYOD

Question 2

Which component in ISE defines the 'result' of an authorization rule?

Accepted Answer

Authorization Profile. The Authorization Profile is the outcome object that is returned to the NAD to dictate session parameters.

Answer

Policy Set

Answer

Identity Source

Answer

Authorization Policy

Question 3

What does the 'Fallthrough' option in an ISE Policy Set rule do?

Accepted Answer

It allows the request to continue to the next rule. Fallthrough allows the request to continue being evaluated against subsequent rules in the policy set if the current rule matches.

Answer

It drops the connection

Answer

It skips the current rule and goes to the next

Answer

It forces the request to the Default rule

Question 4

You need to create a posture condition to verify that the 'Cisco AnyConnect' service is running. Which condition type should you select?

Accepted Answer

Service Condition. Service conditions are used to verify that specific Windows services or macOS processes are active.

Answer

Registry Condition

Answer

Process Condition

Answer

Application Condition

Question 5

You are configuring a Posture policy in Cisco ISE and need to ensure that endpoints running an outdated version of Windows are directed to a specific remediation portal. Which component must you configure to define the conditions that trigger this remediation?

Accepted Answer

Posture Requirements. Posture requirements are the components that define the specific checks (e.g., OS version, registry keys) that must be met to reach a compliant state; if not met, the remediation action is triggered.

Answer

Client Provisioning Policies

Answer

Remediation Actions

Answer

Posture Policies

Question 6

You are configuring a policy set in Cisco ISE for wireless clients. You need to ensure that the policy set only applies to requests originating from a specific WLC. Which condition should you use?

Accepted Answer

NetworkDevice:Name. The Network Device property is used to filter policy sets based on the RADIUS client (WLC) IP or device profile.

Answer

Radius:NAS-IP-Address

Answer

Radius:Called-Station-ID

Answer

Device:Model

Question 7

A TACACS+ command authorization policy is failing to restrict specific configuration changes on a Cisco IOS device. Which field in the TACACS+ Profile must be correctly configured to ensure the command list is evaluated?

Accepted Answer

Command Sets. The 'Command Sets' section within the TACACS+ profile allows you to define permitted or denied commands based on regex or explicit strings.

Answer

Device Administration Policy

Answer

Policy Set Condition

Answer

Shell Profile

Question 8

You need to ensure that the AnyConnect posture agent is updated automatically. Where is this configured?

Accepted Answer

Client Provisioning Policy. The 'Agent Lifecycle' or 'Client Provisioning' settings allow you to define versioning and update requirements.

Answer

Posture Policy > Settings

Answer

Posture Requirements

Answer

Remediation Actions

Question 9

You need to allow users to remediate a non-compliant status manually. Which feature allows them to 'retry' the posture check after they have fixed the issue?

Accepted Answer

Re-scan button in the AnyConnect agent UI. The AnyConnect agent provides a 'Retry' or 'Re-scan' button in the UI once a non-compliant state is detected.

Answer

A remediation link that triggers a command

Answer

A periodic re-scan timer in the posture policy

Answer

Re-authentication via the 802.1X supplicant

Question 10

If you want to use a script remediation, where do you define the script content?

Accepted Answer

Directly in the 'Script Remediation' action in ISE. Script remediation actions require you to provide the script code directly in the ISE GUI under the remediation definition.

Answer

In the Client Provisioning Resource file

Answer

In the Posture Policy XML

Answer

On the endpoint in the AnyConnect directory