300-715 Question #13: Real Exam Question with Answer & Explanation

The correct answer is A: Device Administration License. To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.

Network Access Device Administration

Question

Which two features must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)

Options

ADevice Administration License
BServer Sequence
CCommand Sets
DDevice Admin Service
EExternal TACACS Servers

Explanation

To enable and utilize TACACS+ for device administration in Cisco ISE, an appropriate Device Administration License must be installed, and the Device Admin Service must be enabled on the Policy Service Nodes.

Common mistakes.

B. Server Sequence is used to define the order in which identity sources are consulted, but it's a general configuration for authentication/authorization, not a feature that enables TACACS+ itself.
C. Command Sets are used for granular authorization of commands after TACACS+ is enabled and configured, not for enabling the TACACS+ feature itself.
E. External TACACS Servers are external identity sources, not a feature on Cisco ISE that enables its own TACACS+ functionality; Cisco ISE acts as the TACACS+ server.

Concept tested. Cisco ISE TACACS+ enabling requirements

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_guide_30/b_ISE_admin_guide_30_chapter_01001.html

Topics

#TACACS+#Device Administration#ISE Licensing#ISE Services

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions