SISE Multiple Select — 40 Questions

Question 1

Which TWO of the following are valid ISE deployment personas?

Accepted Answer

Policy Administration Node. The three standard ISE personas are Policy Administration Node (PAN), Monitoring and Troubleshooting Node (MnT), and Policy Service Node (PSN).

Answer

Authentication Proxy Node

Answer

Database Node

Answer

Reporting Node

Question 2

Which THREE of the following are valid types of Client Provisioning Resources?

Accepted Answer

AnyConnect Profile (XML). Valid resources include AnyConnect packages, compliance modules, and profiles.

Answer

Windows Update Agent

Answer

Antivirus definition files

Question 3

Which TWO are common causes for a node to fail to join a deployment?

Accepted Answer

Blocked network ports. The most common causes are certificate validation errors and network connectivity issues (e.g., blocked ports).

Answer

Insufficient memory on the node

Answer

License mismatch between nodes

Answer

Incorrect browser version

Question 4

Which THREE features are configured at the node level in the ISE Administration console?

Accepted Answer

Logging categories. Logging categories, physical interface settings, and service-specific parameters (like profiling probes) are configured per-node.

Answer

Global policy rules

Answer

External ID store configuration

Question 5

Which TWO of the following are valid components of an ISE Posture Policy?

Accepted Answer

Posture Requirement. Posture policies are composed of Requirements and Remediation Actions.

Answer

Identity Group

Answer

Authorization Policy Rule

Answer

Certificate Profile

Question 6

Which TWO of the following are benefits of integrating MDM with Cisco ISE for BYOD?

Accepted Answer

Ability to trigger remote wipe or lock commands. MDM integration enables automated compliance checks and the ability to wipe or lock devices if they are lost.

Answer

Faster SSID connection speed

Answer

Automatic creation of Active Directory accounts

Answer

Increased bandwidth for BYOD users

Question 7

Which THREE of the following items are configured in an AnyConnect Posture Requirement?

Accepted Answer

Condition. Requirements include the condition, the operating system, and the remediation action.

Answer

Device ID

Answer

Authorization Rule

Question 8

Which THREE of the following are necessary to support 'Native Supplicant Provisioning' for iOS devices?

Accepted Answer

The user must manually 'Install' the configuration profile. iOS requires an Apple-signed profile, which ISE generates. The device must be able to reach the portal via HTTPS, and the profile must be trusted by the OS.

Answer

The device must be connected via VPN

Answer

The device must be jailbroken

Question 9

Which TWO of the following are valid device attributes that can be used to identify a device for BYOD onboarding?

Accepted Answer

Device-Type. Device type and operating system are fundamental attributes used in policy conditions to distinguish BYOD devices.

Answer

VLAN-ID

Answer

RADIUS-Session-ID

Answer

Port-Number

Question 10

When setting up TACACS+ for network administration, which THREE configurations must be present on the Cisco network device? (Choose three)

Accepted Answer

AAA authentication/authorization commands. The switch needs the TACACS+ server IP, the shared secret, and the AAA command authorization configured.

Answer

Local user database for all commands

Answer

RADIUS server configuration

Question 11

Which THREE of the following are valid types of Posture Conditions?

Accepted Answer

Service Condition. ISE supports multiple condition types including File, Registry, and Service checks.

Answer

User Identity Condition

Answer

Port Condition

Question 12

Which THREE of the following protocols or standards are critical for the BYOD lifecycle?

Accepted Answer

HTTPS. SCEP is for certificates, HTTPS is for the portal, and RADIUS is for network access control.

Answer

SMTP

Answer

FTP

Question 13

Which TWO functions are performed by the Monitoring and Troubleshooting (MnT) persona?

Accepted Answer

Reporting and analytics. MnT nodes are responsible for collecting logs from all nodes in the deployment and providing the analytics/reporting interface.

Answer

Policy distribution

Answer

RADIUS authentication

Answer

Endpoint profiling probe

Question 14

Which TWO of the following steps are required to deploy the AnyConnect posture agent?

Accepted Answer

Create a Client Provisioning policy. Deployment involves creating the Client Provisioning resource and then creating the policy to assign it to endpoints.

Answer

Set the NAS IP address

Answer

Enable RADIUS Accounting

Answer

Configure a TrustSec policy

Question 15

Which TWO of the following are valid ways to assign a VLAN in an ISE Authorization Profile?

Accepted Answer

Using the VLAN common task. You can use the 'VLAN' common task or the 'Tunnel-Private-Group-ID' RADIUS attribute.

Answer

Using the Filter-Id attribute

Answer

Using the cisco-av-pair attribute

Answer

Using the Framed-IP-Address attribute

Question 16

When configuring a RADIUS authorization policy for a dot1x deployment, which TWO attributes are commonly used to assign a dynamic VLAN?

Accepted Answer

Tunnel-Type equals VLAN. Tunnel-Type and Tunnel-Medium-Type are mandatory RADIUS attributes to signal to a switch that a VLAN assignment is intended.

Answer

Service-Type equals Framed

Answer

Framed-IP-Address

Answer

Cisco-AV-Pair

Question 17

Which THREE conditions are required for successful AnyConnect posture assessment in a wired network environment?

Accepted Answer

The endpoint must have the AnyConnect agent installed.. Posture requires a working authorization profile, a properly provisioned agent, and a clear communication path between the agent and the ISE Policy Services Node (PSN).

Answer

The switch must be configured for WebAuth.

Answer

The endpoint must be joined to an Active Directory domain.

Question 18

Which THREE of the following are valid remediation actions?

Accepted Answer

Service Remediation. File, Registry, and Service remediation are standard in Cisco ISE.

Answer

VLAN Remediation

Answer

ACL Remediation

Question 19

Which THREE attributes can be used within a Cisco ISE Authorization Policy condition?

Accepted Answer

Device Type. ISE allows matching based on a wide range of attributes from dictionaries including Network Device, Endpoint, and Session attributes.

Answer

TACACS+ Command

Answer

SGT Value

Question 20

Which THREE of the following are valid operators for a Registry Condition?

Accepted Answer

Equals. Standard operators include Equals, Contains, and Starts With.

Answer

Includes All

Answer

Exists Only