300-715 Question #250: Real Exam Question with Answer & Explanation

Question

An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes. Which two persona configurations allow the engineer to successfully test redundancy of a failed node? (Choose two.)

Options

• AConfigure one of the Cisco ISE nodes as the Health Check node.
• BConfigure both nodes with the PAN and MnT personas only.
• CConfigure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as
• DConfigure both nodes with the PAN, MnT, and PSN personas.
• EConfigure one of the Cisco ISE nodes as the primary PAN and PSN personas and the other as

Explanation

To test redundancy with two Cisco ISE nodes, both the Policy Administration Node (PAN) and Policy Service Node (PSN) personas need to be deployed in a redundant pair. This requires one node to act as primary for PAN/MnT, and the other as secondary for PAN/MnT, alongside redundant PSN functionality.

Common mistakes.

• A. "Health Check node" is not a standard Cisco ISE persona or configuration for redundancy.
• B. Configuring both nodes with only PAN and MnT personas would provide redundancy for administration and monitoring but would lack any PSN functionality to handle actual authentication requests.
• D. Configuring both nodes with PAN, MnT, and PSN personas simultaneously (all three on both) does not explicitly define the primary/secondary roles necessary for testing specific redundancy scenarios like failover, especially for PAN, and is not an optimal small deployment configuration.

Concept tested. Cisco ISE Distributed Deployment - High Availability and Redundancy

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ISE_admin_3_0/b_ISE_admin_3_0_chapter_010.html#concept_E2FE9C6F69D843FE95D2BB7FC058C360

No community discussion yet for this question.