nerdexam
Cisco

300-430 · Question #307

A company uses Cisco ACS to provide AAA services to network devices. The company recently replaced Cisco ACS with Cisco ISE that runs TACACS+. An IT administrator notices that the Work Centers option

The correct answer is C. Install TACACS+ licenses.. Cisco ISE requires a dedicated Device Administration (TACACS+) license to unlock the Work Centers section that contains device administration pages.

Device Hardening

Question

A company uses Cisco ACS to provide AAA services to network devices. The company recently replaced Cisco ACS with Cisco ISE that runs TACACS+. An IT administrator notices that the Work Centers option that contains the device administration pages is unavailable. Which action resolves the issue?

Options

  • AOpen ports 1812 and 1813.
  • BEnable the Work Centers option for AAA.
  • CInstall TACACS+ licenses.
  • DConfigure a shared secret key in Cisco ISE.

How the community answered

(55 responses)
  • A
    5% (3)
  • B
    4% (2)
  • C
    89% (49)
  • D
    2% (1)

Why each option

Cisco ISE requires a dedicated Device Administration (TACACS+) license to unlock the Work Centers section that contains device administration pages.

AOpen ports 1812 and 1813.

Ports 1812 and 1813 are the RADIUS authentication and accounting ports respectively; opening them has no effect on TACACS+ licensing or the visibility of the Work Centers menu.

BEnable the Work Centers option for AAA.

There is no standalone toggle to 'enable the Work Centers option for AAA' independent of licensing - the license installation is the prerequisite that makes the option appear.

CInstall TACACS+ licenses.Correct

Cisco ISE separates network access (RADIUS) and device administration (TACACS+) functionality into distinct license tiers. The Work Centers > Device Administration section, which houses TACACS+ policy configuration, is only visible and accessible after a valid Device Administration license has been installed and activated in ISE. Without this license, the menu is hidden regardless of other configuration.

DConfigure a shared secret key in Cisco ISE.

Configuring a shared secret key in ISE is required for authenticating device communication but does not resolve a missing license, which is why the Work Centers menu is unavailable.

Concept tested: Cisco ISE TACACS+ Device Administration license requirement

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/b_ISE_admin_guide_24_chapter_01111.html

Topics

#Cisco ISE#TACACS+#AAA licensing#Work Centers

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-430 Practice