Cisco Implementing and Configuring Cisco Identity Service Engine - SISE 認定 500-254 試験問題:

1. Refer to the exhibit.

The authorization policy is using "Multiple Matched Rule Applies" for rule matching. ProfileA = VLAN attribute 10 ProfileB = DACL= Employee, Voice DomainPermission = TRUE Which statement is correct with regards to the Multiple Matched rule?

A) The Multiple Matched rule is not supported in Cisco ISE.
B) If both Rule 1 and Rule 2 are matched based on the conditions, the switch port will only receive VLAN attribute 10.
C) If both Rule 1 and Rule 2 are matched based on the conditions, the switch port will only receive DACL= Employee, Voice DomainPermission = TRUE.
D) If both Rule 1 and Rule 2 are matched based on the conditions, the switch port will receive VLAN attribute 0, DACL= Employee, Voice DomainPermission = TRUE.

2. Which global command is used to activate 802.1X on a switch?

A) dot1x switchport enable
B) dot1x system-auth-control
C) dot1x service start
D) dot1x enable

3. Which of these is not a default behavior of Cisco ISE 1.1, with respect to authentication, when a user connects to a switch port that is configured for 802.1X, MAB, and web authentication?

A) Authentication fails if there is no matching policy.
B) 802.1X uses internal users for retrieving identity.
C) Central WebAuth relies on MAB for initial port authentication.
D) MAB uses internal endpoints for retrieving identity.

4. Which of these is not a method that is used to obtain Cisco ISE profiling data?

A) QoS
B) NetFlow
C) RADIUS
D) active scans
E) DNS
F) SNMP query

5. Which statement is true about 802.1X closed mode?

A) Only EAPOL traffic is allowed until the authentication process is finished.
B) It is the default configuration of an 802.1X-enabled switch port.
C) Cisco Discovery Protocol is allowed before authentication.
D) DNS and DHCP are allowed before authentication.
E) Only EAPOL and Cisco Discovery Protocol are allowed until the authentication process completes.

質問と回答：