650-473 Exam Questions

Where is the license installed within Cisco ISE deployment?

The default Cisco ISE node configuration has which role or roles enabled by default?

When does the browser get redirected in WebAuth?

What does MAB leverage a MAC address for?

Which two statements are correct about Change of Authorization? (Choose two.)

Which command is used to verify Inline Posture node operations?

Which of these is not definable in the guest portal policy?

Which statement is not correct about Change of Authorization?

What is the best option to implement access lists for WLC in a Cisco ISE deployment?

What is the correct configuration of Inline Posture node interfaces? Cisco 650-473 Exam

Which statement is not true about the authorization policy?

Which of these is not a high-availability option that is available for Cisco ISE deployments?

Which is the cisco-av-pair automatically set to for all Inline Posture inbound profiles?

Which of these is not a Cisco ISE deployment recommendation?

Refer to the exhibit. Which two statements are true about Identity Groups and their use in an authorization policy? (Choose two.)

What is the condition that a Cisco ISE authorization policy cannot match?

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

Which three conditions can be used for posture checking? (Choose three.)

Which two statements are correct regarding Cisco ISE Guest Services? (Choose two.)

Which statement is correct about iPad profiling?

Which authentication method or methods are included in FlexAuth?

What does MAB stand for? Cisco 650-473 Exam

If MAB is enabled before WebAuth in Policy -> Authentications, what option must be selected if authentication fails, in order for users to have the ability to log in to the guest p...

Which of these is not a method to obtain Cisco ISE profiling data?

Inline Posture nodes support which enforcement mechanisms?

What are the Cisco ISE posture building blocks?

What are the three key layers of the Cisco TrustSec 4okjtK>n architecture? (Choose three)

Which statement is not correct about the Cisco ISE Monitoring node?

Which Cisco ISE component intercepts HTTP and HTTPS requests and redirects them to the Guest User Portal?

Which three of these are viable endpoint posture compliance statuses? (Choose three.)

An administrator can create CP policies to provision different resources based on which three things? (Choose three.)

What is the result when a Cisco ISE administrator removes a permanent license?

What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)

Which statement is not a restriction when the guest portal runs on a node that assumes the Policy Service persona, because the node with the Administration persona is offline?

Which of the following is not true about profiling in Cisco ISE?

Client provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)

What are the three Cisco TrustSec enforcement modes that are used to help protect network operations when securing the network? (Choose three.)

What are the three network information items that are required to set up Cisco ISE? (Choose three.)

What is not a Cisco Borderless Network service?

Which information is not included in the Low Level Design document?

Which of these is not an Inline Posture node operating mode?

Which one of the following statements is not a correct statement about posture?

What are the three default behaviors of Cisco ISE with respect to authentication, when a user connects to a switch that is configured for 802.1X, MAB, and WebAuth? (Choose three)

The profiling data from network access devices is sent to which Cisco ISE node?

Which statement is not true about client provisioning (CP)?

Which default action or action should you take when endpoint usage count exceeds license endpoint value?

The authorization policy in the exhibit is using "Multiple Matched Rule Applies" for rule matching. ProfileA = VLAN attribute 10, DACL= EmptoyeeSanJose ProfileB = VLAN attribute 20...

What is the process for Cisco ISE to obtain a signed certificate from a CA?

Which two statements are true about the exhibit that is shown? (Choose two.) Select exactly 2 answer(s) from the following:

What is the Cisco ISE default admin login name and password?