NO.118 A network administrator is setting up wireless guest access and has been unsuccessful in testing client access. The endpoint is able to connect to the SSID but is unable to grant access to the guest network through the guest portal. What must be done to identify the problem?

NO.119 An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

NO.120 Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

NO.121 What are two requirements of generating a single signing in Cisco ISE by using a certificate provisioning portal, without generating a certificate request? (Choose two )

NO.122 When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting. Which policy condition must be used in order to accomplish this?

NO.123 Refer to the exhibit.

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server Which two commands should be run to complete the configuration? (Choose two)

NO.124 Which portal is used to customize the settings for a user to log in and download the compliance module?

NO.125 What is the purpose of the ip http server command on a switch?

NO.126 How is policy services node redundancy achieved in a deployment?

NO.127 An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE. What must be configured within Cisco ISE to accomplish this goal?

NO.128 Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

NO.129 An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?

NO.130 Which personas can a Cisco ISE node assume’?

NO.131 An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?

NO.132 An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right.

NO.133 Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

NO.134 Drag and Drop Question
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

NO.135 An administrator is troubleshooting an endpoint that is supposed to bypass 802 1X and use MAB. The endpoint is bypassing 802.1X and successfully getting network access using MAB. however the endpoint cannot communicate because it cannot obtain an IP address. What is the problem?

NO.136 What does a fully distributed Cisco ISE deployment include?

NO.137 In which two ways can users and endpoints be classified for TrustSec?
(Choose Two.)