20+ practice questions focused on Network Access Device Administration — one of the most tested topics on the Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Network Access Device Administration PracticeWhat is the primary function of the TACACS+ 'Shared Secret' configured on both the Cisco ISE and the Network Access Device?
Explanation: The TACACS+ shared secret is a pre-shared key configured identically on Cisco ISE and the network access device. It is used to authenticate the TACACS+ packet exchange and to encrypt the payload of TACACS+ packets, ensuring that only trusted devices can communicate and that credentials are not sent in cleartext.
You need to ensure that TACACS+ authentication requests for network devices are only accepted if the device IP matches a specific Network Device Group. Where do you configure the Device Type condition?
Explanation: TACACS+ authentication requests can be restricted based on device attributes by configuring conditions in the Policy Set. The 'Device Type' condition is defined within the Policy Set conditions, allowing you to match the device IP to a specific Network Device Group and enforce authentication only for those devices.
A network engineer reports that they can log into a switch via TACACS+, but cannot run any commands. What is the most likely cause?
Explanation: In Cisco ISE TACACS+ device administration, authentication and authorization are separate policy stages. If a user can authenticate but cannot run any commands, the Authorization Policy is matching but the assigned Command Set is missing or empty, so no exec or configuration commands are permitted. The Command Set defines the allowed/denied command list and must be attached to the authorization rule.
You want to use TACACS+ for administrative access. Which protocol feature distinguishes TACACS+ from RADIUS for device administration?
Explanation: TACACS+ encrypts the entire packet body, whereas RADIUS only encrypts the password field, making TACACS+ the more secure choice for administrative access. This full-payload encryption is a defining differentiator between the two AAA protocols.
You are configuring a policy to allow 'Read-Only' access for junior admins. You have created a Command Set that allows 'show' commands. What else is required to implement 'Read-Only' access correctly?
Explanation: To implement read-only access, you need both a Shell Profile that sets the privilege level (level 1 for read-only) and a Command Set that defines which commands are permitted. The Shell Profile is assigned via the TACACS+ authorization policy and controls the initial privilege level the user lands in, while the Command Set enforces per-command authorization. Assigning privilege level 1 with the 'show' command set correctly restricts the junior admin to read-only operations.
+15 more Network Access Device Administration questions available
Practice all Network Access Device Administration questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Network Access Device Administration. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Network Access Device Administration questions on the SISE frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Network Access Device Administration is tested as part of the Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) blueprint. Practicing with targeted Network Access Device Administration questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free SISE practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Network Access Device Administration is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Network Access Device Administration practice session with instant scoring and detailed explanations.
Start Network Access Device Administration Practice →