300-715 Question #283: Real Exam Question with Answer & Explanation

Question

Which two statements regarding Zero Touch Provisioning (ZTP) on Cisco ISE are correct? (Choose two.)

Options

• AAll passwords must be encrypted in the configuration file
• BZTP cannot be used if ICMP is blocked
• CZTP is only supported on VMWare
• DZTP is only supported on virtual appliances
• ELinux is required to create the configuration image

Explanation

Zero Touch Provisioning (ZTP) on Cisco ISE is supported exclusively on virtual appliances and necessitates a Linux environment to create the configuration image for automated deployment.

Common mistakes.

• A. While security is important, the statement that 'all passwords must be encrypted' is an absolute and not a universally defining characteristic of ZTP itself, which focuses on automated deployment.
• B. ZTP relies on network protocols like DHCP and TFTP/HTTP, and while ICMP can be useful for diagnostics, ZTP does not inherently fail if ICMP is blocked.
• C. ZTP is supported on various virtualization platforms, including KVM, and is not limited to only VMWare deployments.

Concept tested. Cisco ISE Zero Touch Provisioning (ZTP) requirements

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/installation_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_0101.html

No community discussion yet for this question.