300-715 · Question #390
Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user's traffic usi
Sign in or unlock 300-715 to reveal the answer and full explanation for question #390. The question stem and answer options stay visible for context.
Question
Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user's traffic using inline tagging to prevent unauthenticated users from accessing a restricted server. The configurations were performed:
- configured Cisco ISE as a Cisco TrustSec AAA server
- configured the switch as a RADIUS device in Cisco ISE
- configured the wireless LAN controller as a TrustSec device in Cisco
ISE
- created a security group tag for the wireless users
- created a certificate authentication profile
- created an identity source sequence
- assigned an appropriate security group tag to the wireless users
- defined security group access control lists to specify an egress
policy
- enforced the access control lists on the TrustSec policy matrix in
Cisco ISE
- configured TrustSec on the switch
- configured TrustSec on the wireless LAN controller
Which two actions must be taken to complete the configuration? (Choose two.)
Options
- ACreate static IP-to-SGT mapping for the restricted web server.
- BConfigure inline tag propagation on the switch and wireless LAN controller.
- CConfigure Security Group Tag Exchange Protocol to distribute IP to security group tags on Cisco
- DConfigure Security Group Tag Exchange Protocol on the switch.
- EConfigure Security Group Tag Exchange Protocol on the wireless LAN controller.
Unlock 300-715 to see the answer
You've previewed enough free 300-715 questions. Unlock 300-715 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.