SISE Practice Test 7 — 10 Questions

Question 1

Which THREE attributes can be used within a Cisco ISE Authorization Policy condition?

Accepted Answer

Device Type. ISE allows matching based on a wide range of attributes from dictionaries including Network Device, Endpoint, and Session attributes.

Answer

TACACS+ Command

Answer

SGT Value

Question 2

Which of the following is a valid remediation action type in Cisco ISE?

Accepted Answer

File Remediation. File, Registry, and Service remediation are standard options.

Answer

Process Kill Remediation

Answer

Network Remediation

Answer

User Prompt Remediation

Question 3

What is the purpose of the 'Posture Discovery' phase?

Accepted Answer

To identify if posture is required for the session. Discovery is the initial communication where the agent identifies the ISE PSN and checks if a posture policy exists.

Answer

To verify the user credentials

Answer

To remediate non-compliant endpoints

Answer

To determine if the endpoint is compliant

Question 4

In the BYOD flow, what occurs immediately after the user provides credentials in the portal?

Accepted Answer

The device is provisioned with a certificate. After credentials are verified, the ISE portal triggers the download of the Network Setup Assistant or the SCEP enrollment process.

Answer

The device is automatically moved to the production VLAN

Answer

The user is disconnected from the network

Answer

The device is registered in the Active Directory

Question 5

Which THREE of the following are valid operators for a Registry Condition?

Accepted Answer

Equals. Standard operators include Equals, Contains, and Starts With.

Answer

Includes All

Answer

Exists Only

Question 6

Which TWO of the following are mandatory steps for configuring BYOD with Cisco ISE?

Accepted Answer

Enable BYOD settings in the device portal configuration. The two core requirements are enabling the BYOD portal and configuring the authorization policy to handle the registration flow.

Answer

Install a dedicated agent on every switch

Answer

Create a local user account for every device

Answer

Disable RADIUS authentication

Question 7

What is the benefit of using multiple TACACS+ Policy Sets?

Accepted Answer

To segment policies by device type or user group. Policy Sets allow for granular control and different rules for different types of devices or users.

Answer

To increase the speed of authentication

Answer

To reduce the need for shared secrets

Answer

To increase the number of users allowed

Question 8

Which of the following is NOT a standard RADIUS attribute type used in ISE?

Accepted Answer

Protocol Header. Standard RADIUS attributes follow specific RFC formats; custom vendor-specific attributes (VSAs) are used for Cisco proprietary functions.

Answer

System Defined

Answer

IETF

Answer

Vendor Specific

Question 9

When a device connects to a port, it is put into 'Monitoring Mode'. What is the purpose of this state?

Accepted Answer

To test the policy before enforcing access control. Monitoring mode allows the admin to see if 802.1X/MAB would pass or fail without actually blocking traffic.

Answer

To force the port to shutdown

Answer

To provide internet access to guests

Answer

To perform vulnerability scanning

Question 10

What is the primary function of the 'Monitor Mode' in Cisco ISE Posture policies?

Accepted Answer

To gather compliance data without restricting network access. Monitor Mode allows administrators to log posture results without denying access, facilitating testing before enforcement.

Answer

To automatically remediate endpoints

Answer

To bypass the posture check entirely

Answer

To block all traffic until the agent is installed