nerdexam
Exams300-430Questions#307
Cisco

300-430 · Question #307

300-430 Question #307: Real Exam Question with Answer & Explanation

The correct answer is C: Install TACACS+ licenses.. Cisco ISE requires a dedicated Device Administration (TACACS+) license to unlock the Work Centers section that contains device administration pages.

Question

A company uses Cisco ACS to provide AAA services to network devices. The company recently replaced Cisco ACS with Cisco ISE that runs TACACS+. An IT administrator notices that the Work Centers option that contains the device administration pages is unavailable. Which action resolves the issue?

Options

  • AOpen ports 1812 and 1813.
  • BEnable the Work Centers option for AAA.
  • CInstall TACACS+ licenses.
  • DConfigure a shared secret key in Cisco ISE.

Explanation

Cisco ISE requires a dedicated Device Administration (TACACS+) license to unlock the Work Centers section that contains device administration pages.

Common mistakes.

  • A. Ports 1812 and 1813 are the RADIUS authentication and accounting ports respectively; opening them has no effect on TACACS+ licensing or the visibility of the Work Centers menu.
  • B. There is no standalone toggle to 'enable the Work Centers option for AAA' independent of licensing - the license installation is the prerequisite that makes the option appear.
  • D. Configuring a shared secret key in ISE is required for authenticating device communication but does not resolve a missing license, which is why the Work Centers menu is unavailable.

Concept tested. Cisco ISE TACACS+ Device Administration license requirement

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/b_ISE_admin_guide_24_chapter_01111.html

Community Discussion

No community discussion yet for this question.

Full 300-430 Practice