500-254 Exam Questions

What are the three default Cisco ISE identity user groups? (Choose three.)

Which three features require accurate time? (Choose three.)

What is the default authorization rule in Cisco ISE?

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

Which three network information items are required to set up Cisco ISE? (Choose three.)

If MAB is enabled before WebAuth in Policy -> Authentications, what option must be selected if authentication fails, in order for users to have the ability to log in to the guest p...

When does the browser get redirected in WebAuth?

Which of these is NOT an Inline Posture node operating mode?

What is the cisco-av-pair automatically set to for an Inline Posture node profile?

Which Authentication Policy option should be selected for MAB rule to support Central Web Auth?

Which two dictionary groups does Cisco ISE provide? (Choose two.)

What is the limit of groups that Cisco ISE can retrieve from an Active Directory?

Which global command is used to activate 802.1X on a switch?

Which two commands are needed to configure 802.1X open mode? (Choose two.)

Which statement is true about 802.1X closed mode?

The 802.1X protocol supports which two port types? (Choose two.)

What is the default period for Cisco ISE to automatically purge expired guest accounts?

What is the recommended time zone for Cisco ISE installations?

Which two EAP authentication methods require only a server certificate? (Choose two.)

Which three encryption policies does MACsec support? (Choose three.)

Which URL should you enter into the SCEP Certificate Authority profile to enable Native Supplicant Provisioning?

Which network information device sensor is sending in the RADIUS accounting packet?

Which of these is not a default behavior of Cisco ISE 1.1, with respect to authentication, when a user connects to a switch port that is configured for 802.1X, MAB, and web authent...

Refer to the exhibit. Which two statements about the exhibit are true? (Choose two.)

Refer to the exhibit. Which two statements are true about identity groups and their use in an authorization policy? (Choose two.)

Refer to the exhibit. The authorization policy is using "Multiple Matched Rule Applies" for rule matching. ProfileA = VLAN attribute 10 ProfileB = DACL= Employee, Voice DomainPermi...

How are access control lists implemented on a Cisco WLC in a Cisco ISE authorization policy?

Which two statements are correct about Change of Authorization? (Choose two.)

Which two statements are correct regarding Cisco ISE Guest Services? (Choose two.)

What are the Cisco ISE posture building blocks?

Which three of these are viable endpoint posture compliance statuses? (Choose three.)

Which three conditions can be used for posture checking? (Choose three.)

Client provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)

Which element is not included in the redirect URL?

Which Cisco ISE component intercepts HTTP and HTTPS requests and redirects them to the Guest User Portal?

Which of these is not a method that is used to obtain Cisco ISE profiling data?

Which three client provisioning policies can an administrator create to provision different resources? (Choose three.)

Which of these is NOT a Cisco ISE deployment recommendation?

Which option represents the default action or actions that ISE 1.x 1.0 takes when the endpoint usage count exceeds licensed endpoint values?

Which two elements must you configure on a Cisco Wireless LAN Controller to allow Cisco ISE to authenticate wireless users? (Choose two.)

Which three Cisco TrustSec enforcement modes are used to help protect network operations when securing the network? (Choose three.)

Which statement is correct about Change of Authorization?

The default Cisco ISE node configuration has which role or roles enabled by default?

Inline Posture nodes support which enforcement mechanisms?

What is the process for Cisco ISE to obtain a signed certificate from a CA?

What is the Cisco ISE default admin login name and password?

What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)

Where is the license installed within Cisco ISE deployment?

Which of these is NOT a high-availability option that is available for Cisco ISE deployments?

Which types of design are required in the Cisco ISE ATP program?