300-715 · Question #13
Which two features must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)
The correct answer is A. Device Administration License D. Device Admin Service. To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.
Question
Which two features must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)
Options
- ADevice Administration License
- BServer Sequence
- CCommand Sets
- DDevice Admin Service
- EExternal TACACS Servers
How the community answered
(45 responses)- A89% (40)
- B7% (3)
- C2% (1)
- E2% (1)
Why each option
To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.
A Device Administration License is required in Cisco ISE to unlock and use the TACACS+ functionality for authenticating and authorizing administrative access to network devices. Without this license, TACACS+ features are not available.
Server Sequence is used to define the order in which identity sources are consulted, but it's a general configuration for authentication/authorization, not a feature that enables TACACS+ itself.
Command Sets are used for granular authorization of commands after TACACS+ is enabled and configured, not for enabling the TACACS+ feature itself.
The Device Admin Service must be enabled on the Policy Service Nodes in Cisco ISE to handle TACACS+ requests from network devices. This service processes the authentication and authorization policies specifically for device administration.
External TACACS Servers are external identity sources, not a feature on Cisco ISE that enables its own TACACS+ functionality; Cisco ISE acts as the TACACS+ server.
Concept tested: Cisco ISE TACACS+ enabling requirements
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_guide_30/b_ISE_admin_guide_30_chapter_01001.html
Topics
Community Discussion
No community discussion yet for this question.