Download New Updated (Spring 2015) Cisco 500-254 Actual Tests 11-20

Ensurepass

 

QUESTION 11

What are the three default Cisco ISE identity user groups? (Choose three.)

 

A.

employee

B.

contractor

C.

activated guest

D.

guest

E.

sponsor

 

Correct Answer: ACD

 

 

QUESTION 12

Which three features require accurate time? (Choose three.)

 

A.

EAP-TLS-based authentication

B.

EAP-MS-CHAPv2-based authentication

C.

accurate posture assessment results

D.

Active Directory integration

E.

consistent profiling data collection

F.

accurate and reliable logging

 

Correct Answer: ADF

 

 

QUESTION 13

What is the default authorization rule in Cisco ISE?

 

A.

permit all access

B.

deny all access

C.

redirect users to CWA

D.

redirect users to LWA

 

Correct Answer: A

 

QUESTION 14

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

 

A.

TCP 88

B.

TCP 445

C.

UDP 53

D.

UDP 123

E.

UDP/TCP 389

 

Correct Answer: C

 

 

QUESTION 15

Which three network information items are required to set up Cisco ISE? (Choose three.)

 

A.

primary name server

B.

secondary name server

C.

Network Time Protocol server

D.

hostname

E.

IP address and netmask of the Gigabit Ethernet 1 interface

 

Correct Answer: BCD

 

 

QUESTION 16

If MAB is enabled before WebAuth in Policy -> Authentications, what option must be selected if authentication fails, in order for users to have the ability to log in to the guest portal?

 

A.

Accept

B.

Reject

C.

Continue

D.

Drop

 

Correct Answer: B

 

 

QUESTION 17

When does the browser get redirected in WebAuth?

 

A.

when there is a request for DNS

B.

before getting the IP address

C.

when there is a request for a web page

D.

when the Cisco NAC Agent reaches the Policy Service node

 

Correct Answer: C

 

 

QUESTION 18

Which of these is NOT an Inline Posture node operating mode?

 

A.

router mode

B.

bridged mode

C.

transparent mode

D.

maintenance mode

 

Correct Answer: C

 

 

QUESTION 19

What is the cisco-av-pair automatically set to for an Inline Posture node profile?

 

A.

ipep-compliant=true

B.

ipep-authz=true

C.

inline-posture=true

D.

SessionIdValue&action=cpp

 

Correct Answer: B

 

 

QUESTION 20

Which Authentication Policy option should be selected for MAB rule to support Central Web Auth?

 

A.

Accept

B.

Reject

C.

Continue

D.

Drop

 

Correct Answer: C

 

Free VCE & PDF File for Cisco 500-254 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …