300-715 · Question #417
300-715 Question #417: Real Exam Question with Answer & Explanation
The correct answer is C: Device Admin service. {"question_number": 8, "question_summary": "Enabling TACACS+ operations in a new Cisco ISE environment", "correct_answer": "C", "explanation": "Having a Device Administration license is necessary but not sufficient to use TACACS+ in Cisco ISE. The Device Admin service must also b
Question
An engineer is deploying a new Cisco ISE environment for a company. The company wants the deployment to use TACACS+. The engineer verifies that Cisco ISE has a Device Administration license. What must be configured to enable TACACS+ operations?
Options
- ADevice Administration Work Center
- BDevice Administration Deployment settings
- CDevice Admin service
- DDevice Admin Policy Sets settings
Explanation
{"question_number": 8, "question_summary": "Enabling TACACS+ operations in a new Cisco ISE environment", "correct_answer": "C", "explanation": "Having a Device Administration license is necessary but not sufficient to use TACACS+ in Cisco ISE. The Device Admin service must also be explicitly enabled on the ISE deployment node(s) that will handle TACACS+ requests (Administration > System > Deployment > select node > Enable Device Admin Service). Without this service enabled, ISE will not listen on TCP port 49 for TACACS+ traffic regardless of licensing. The Device Administration Work Center (option A) is a UI navigation area, not a service that must be turned on. Policy Sets (option D) and Deployment settings (option B) are subsequent configuration steps, not the prerequisite service activation.", "generated_by": "claude-sonnet", "llm_judge_score": 4}
Topics
Community Discussion
No community discussion yet for this question.