nerdexam
Cisco

300-715 · Question #290

The security engineer for a company has recently deployed Cisco ISE to perform centralized authentication of all network device logins using TACACSs+ against the local AD domain. Some of the other net

The correct answer is D. Work Centers> Device Administration> Settings> Connection Settings. The password prompt for TACACS+ logins can be customized in Cisco ISE under Work Centers > Device Administration > Settings > Connection Settings.

Network Access Device Administration

Question

The security engineer for a company has recently deployed Cisco ISE to perform centralized authentication of all network device logins using TACACSs+ against the local AD domain. Some of the other network engineers are having a hard time remembering to enter their AD account password instead of the local admin password that they have used for years. The security engineer wants to change the password prompt to "Use Local AD Password:" as a way of providing a hint to the network engineers when logging in. Under which page in Cisco ISE would this change be made?

Options

  • AWork Centers> Device Administration Ext Id Sources>Advanced Settings
  • BThe password prompt cannot be changed on a Cisco IOS device
  • CWork Centers> Device Administration> Network Resources> Network Devices
  • DWork Centers> Device Administration> Settings> Connection Settings

How the community answered

(19 responses)
  • A
    5% (1)
  • B
    5% (1)
  • D
    89% (17)

Why each option

The password prompt for TACACS+ logins can be customized in Cisco ISE under Work Centers > Device Administration > Settings > Connection Settings.

AWork Centers> Device Administration Ext Id Sources>Advanced Settings

This path is for advanced settings of external identity sources, not global connection or prompt customizations.

BThe password prompt cannot be changed on a Cisco IOS device

The password prompt can indeed be changed via Cisco ISE, making this statement incorrect.

CWork Centers> Device Administration> Network Resources> Network Devices

This path is used for managing individual network devices, not for global connection settings like the password prompt.

DWork Centers> Device Administration> Settings> Connection SettingsCorrect

Cisco ISE allows customization of the password prompt displayed to users during TACACS+ authentication, providing a hint like 'Use Local AD Password:'. This setting is found by navigating to Work Centers > Device Administration > Settings and then selecting Connection Settings, where options for customizing authentication and authorization prompts are available.

Concept tested: Cisco ISE TACACS+ password prompt customization

Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ise_admin_guide_26/b_ise_admin_guide_26_chapter_0100.html

Topics

#Cisco ISE#TACACS+#Device Administration#Password Prompt Customization

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice