nerdexam
Cisco

300-715 · Question #13

Which two features must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)

The correct answer is A. Device Administration License D. Device Admin Service. To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.

Network Access Device Administration

Question

Which two features must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)

Options

  • ADevice Administration License
  • BServer Sequence
  • CCommand Sets
  • DDevice Admin Service
  • EExternal TACACS Servers

How the community answered

(45 responses)
  • A
    89% (40)
  • B
    7% (3)
  • C
    2% (1)
  • E
    2% (1)

Why each option

To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.

ADevice Administration LicenseCorrect

A Device Administration License is required in Cisco ISE to unlock and use the TACACS+ functionality for authenticating and authorizing administrative access to network devices. Without this license, TACACS+ features are not available.

BServer Sequence

Server Sequence is used to define the order in which identity sources are consulted, but it's a general configuration for authentication/authorization, not a feature that enables TACACS+ itself.

CCommand Sets

Command Sets are used for granular authorization of commands after TACACS+ is enabled and configured, not for enabling the TACACS+ feature itself.

DDevice Admin ServiceCorrect

The Device Admin Service must be enabled on the Policy Service Nodes in Cisco ISE to handle TACACS+ requests from network devices. This service processes the authentication and authorization policies specifically for device administration.

EExternal TACACS Servers

External TACACS Servers are external identity sources, not a feature on Cisco ISE that enables its own TACACS+ functionality; Cisco ISE acts as the TACACS+ server.

Concept tested: Cisco ISE TACACS+ enabling requirements

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_guide_30/b_ISE_admin_guide_30_chapter_01001.html

Topics

#TACACS+#Device Administration#ISE Licensing#ISE Services

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice