A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a leave operation. Which action on Active Directory is needed to meet the requirement?

Question

Options

• ARemove the ISE machine account from the domain.
• BRemove the ISE user account from the domain.
• CCreate ISE machine account to domain.
• DSearch Active Directory to see if admin user account exists.

• A
  72% (49)
• B
  7% (5)
• C
  16% (11)
• D
  4% (3)

Explanation

When Cisco ISE joins an Active Directory domain, it creates a machine account (computer account) in AD to represent itself as a domain member. The 'leave' operation in ISE reverses this: it removes that machine account from the Active Directory domain, effectively severing the trust relationship. This is an action on Active Directory because the machine account object must be deleted from the directory. Choice B (ISE user account) is incorrect - ISE uses a machine account, not a user account, for the domain join. Choice C (create ISE machine account) is the opposite of a leave operation. Choice D (search for admin user) is a pre-join verification step, not a leave action.

No community discussion yet for this question.