300-715 Question #158: Real Exam Question with Answer & Explanation

The correct answer is D: Enable the device administration service in the PSN persona.. {"question_number": 3, "question": "An administrator is configuring Cisco ISE to authenticate users logging into network devices using TACACS+. Which action ensures the users are able to log into the network devices?", "correct_answer": "D", "explanation": "The Device Administrat

Network Access Device Administration

Question

An administrator is configuring cisco ISE lo authenticate users logging into network devices using. Which action ensures the users are able to log into the network devices?

Options

AEnable the device administration service in the Administration persona
BEnable the session services in the administration persona
CEnable the service sessions in the PSN persona.
DEnable the device administration service in the PSN persona.

Explanation

{"question_number": 3, "question": "An administrator is configuring Cisco ISE to authenticate users logging into network devices using TACACS+. Which action ensures the users are able to log into the network devices?", "correct_answer": "D", "explanation": "The Device Administration service (TACACS+) must be enabled on the Policy Service Node (PSN) persona. The PSN is the node that actually handles authentication and authorization sessions. The Administration persona (PAN) is used for configuration and management of the ISE deployment but does not process TACACS+ authentication requests. Without enabling Device Administration on the PSN, the switch or router will not be able to reach an active TACACS+ listener to authenticate login attempts.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

Topics

#Cisco ISE#Device Administration#PSN Persona#TACACS+

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions