300-715 Question #360: Real Exam Question with Answer & Explanation

Question

A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a join operation. Which action must the security administrator take?

Options

• ASearch Active Directory to see if admin user account exists
• BRemove the ISE machine account from the domain
• CJoin Cisco ISE to the Active Directory domain
• DRemove Cisco ISE user account from the domain.

Explanation

{"question_number": 4, "question": "A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a join operation...", "correct_answer": "C", "explanation": "Integrating Cisco ISE with Active Directory requires a domain join operation, in which ISE creates a machine account in the AD domain and establishes a trust relationship. This is performed from the ISE Administration portal under External Identity Sources → Active Directory, where the administrator provides the domain name, a domain admin account, and then clicks 'Join.' Options A, B, and D describe actions that are either preparatory checks or destructive removal steps, not the actual join operation. The join operation is what creates the ISE machine account in AD and enables LDAP/Kerberos-based authentication and attribute retrieval.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.