650-472 Exam Questions

Consider the example of an end user plugging an unmanaged third-party switch into a port in a conference room. If the wiring closet switch port requires 802.1X authentication (and...

Which two Cisco Catalyst switch command fragments enable WebAuth support on an interface? (Choose two.)

Which two statements are true with regard to the inner and outer phases of an EAP method? (Choose two.)

Which Cisco ISE persona must run on dedicated hardware?

Which statement accurately describes why it is a best practice to pre-populate the MAC addresses of non-802.1X-capable Cisco IP phones into an endpoint database?

Which two Cisco security products act as 802.1X authenticate servers? (Choose two)

Which two EAP methods require server-side digital certificates? (Choose two)

Which two statements are true regarding load balancing Cisco ISE Policy Services nodes with a Cisco Application Control Engine? (Choose two.)

Which statement is true for certificate auto-enrollment on a Cisco IP phone?

What is the purpose of the guest VLAN on a Cisco Catalyst switch?

Cisco 650-472 Exam Which two PEAP requirements must be met to authenticate the TLS session? (Choose two.)

Which two sets of ports does Cisco ISE listen on for RADIUS authentication and accounting messages? (Choose two.)

Which three elements are required fields when adding a Cisco Wireless IAN Controller as a network device in Cisco ISE? (Choose three)

During initial ISE setup, foe which three of the following required and optional elements does the setup script prompt the administrator to enter a value? (Choose three)

What action must be performed immediately after initial login to the Cisco ISE GUI?

Which method provides authenticated guest access to nonsupplicant hosts?

Which hardware component of a Cisco TrustSec solution for 802.1X is optional but widely adopted in most networks?

Consider a design where a Cisco Catalyst switch that supports Network Edge Access Topology (NEAT) is connected to an upstream switch that requires 802.1X authentication on the swit...

Which two of these Cisco products can act as 802.1X authenticates? (Choose two.)

What is the purpose of the fallback profile command?

What is the purpose of the restricted VLAN (authentication failed VLAN) on a Cisco Catalyst switch?

Which three services run on a Cisco ISE node? Cisco 650-472 Exam

Whit is the default username and password for Cisco ISE?

On which two non-ISE appliances can Cisco ISE also be loaded? (Choose two)

Which three types of NAD support RADIUS Change of Authorization requests? (Choose three)

Which four of these operating systems include a native 802.IX? (Choose four.)

Which standards body maintains the 802.1X standard?

Which two choices are valid Cisco TrustSec topologies? (Choose two)

What is the default authentication mode after initial configuration of Cisco ISE?

Which three of these options can be configured as external identity servers for Cisco ISE? (Choose three)

Which two of these partial Cisco Catalyst switch commands are used to configure FlexAuth? (Choose two)

What is the purpose of local WebAuth on a Cisco Catalyst switch?

Which three implementation modes are valid for phased implementation of Cisco TrustSec? (Choose three.)

In which OSI layer does EAP operate?

Which Cisco TrustSec device performs user authenticated?

Which three authentication c interface commands are valid for MACsec? (Choose three.)

The information security policy of your organization requires that ports should remain administratively Up. Which selection represents the best practice for an 802.1X-enabled port...

Which three statements about hosts moving from port to port on the same switch that is configured for 802.1X are true? (Choose three.)

What must be configured on a Microsoft Windows 7 host to enable the Microsoft 802.1X supplicant for wired networks?

Which three selections are valid model numbers for Cisco ISE hardware appliances? (Choose three)

What is the purpose of the ip device-tracking command on a Cisco Catalyst switch?

Which two choices are valid components of a Cisco TrustSec wireless infrastructure solution? (Choose two.)

Which section of the 802.1X standard cites other 802 standards needed to Wry understand the scope of 802.1X?

Which section of the 802.1X standard includes use cases? Cisco 650-472 Exam

Which two statements are true regarding communication from the authenticator to the authentication server (Cisco ISE)? (Choose two.)

Which four selections below describe valid Cisco ISE Personas? (Choose four.)

Which statement is true regarding the initiation of an 802.1X authentication exchange?

Which protocol used to communicate between the authenticator and authentication server? Cisco 650-472 Exam

Which two choices are drivers of IEEE 802.1X adoption? (Choose two.)

Which EAP method requires a digital certificate on the client?