QUESTION 153
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group.
Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

QUESTION 154
An engineer must onboard secure Windows 11 laptops of directors on the BYOD portal by using Cisco ISE. Corporate security policies require the Cisco ISE internal CA to use an ECC certificate rather than the standard RSA certificate. What must be configured in Cisco ISE?

QUESTION 155
An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy.
Which two components must be configured, in addition to Active Directory groups, to achieve this goal? (Choose two )

QUESTION 156
What is a characteristic of the UDP protocol?

QUESTION 157
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

QUESTION 158
Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE?
(Choose two).

QUESTION 159
An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

QUESTION 160
Which two probes must be enabled for the ARP cache to function in the Cisco ISE profile service so that a user can reliably bind the IP address and MAC addresses of endpoints? (Choose two.)

QUESTION 161
An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy. Which two components must be configured, in addition to Active Directory groups, to achieve this goat? (Choose two )

QUESTION 162
MacOS users are complaining about having to read through wordy instructions when remediating their workstations to gam access to the network Which alternate method should be used to tell users how to remediate?

QUESTION 163
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

QUESTION 164
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected.
Which service should be used to accomplish this task?

QUESTION 165
Which type of identity store allows for creating single-use access credentials in Cisco ISE?

QUESTION 166
A user misplaces a personal phone and wants to blacklist the device from accessing the company network. The company uses Cisco ISE for corporate and BYOD device authentication. Which action must the user take in Cisco ISE?

QUESTION 167
An administrator connects an HP printer to a dot1x enable port, but the printer in not accessible.
Which feature must the administrator enable to access the printer?

QUESTION 168
What does a fully distributed Cisco ISE deployment include?

QUESTION 169
An engineer needs to configure a Cisco ISE server to issue a CoA for endpoints already authenticated to access the network. The CoA option must be enforced on a session, even if there are multiple active sessions on a port. What must be configured to accomplish this task?

QUESTION 170
Refer to the exhibit.

An engineer is configuring a client but cannot authenticate to Cisco ISE During troubleshooting, the show authentication sessions command was issued to display the authentication status of each port Which command gives additional information to help identify the problem with the authentication?

QUESTION 171
Which two default endpoint identity groups does cisco ISE create? (Choose two )

QUESTION 172
An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right.

QUESTION 173
An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’.
Which two actions occur within Cisco ISE as a result of this action? (Choose two)