Online Access Free 500-254 Exam Questions

What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)

• A.Use ktpass to determine if the Kerberos ticket is valid.
• B.Use the Test Connection feature in the Cisco ISE External Identity Sources Active Directory.
• C.Use the ISE Dashboard Summary alarms.
• D.View the Active Directory Log /opt/CSCOcmp/logs/ad_agent.log.

The default Cisco ISE node configuration has which role or roles enabled by default?

• A.Inline Posture only
• B.Policy Service, Monitoring, and Administration
• C.Administration and Policy Service
• D.Administration only

What is the process for Cisco ISE to obtain a signed certificate from a CA?

• A.Generate a CSR; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
• B.Submit a CSR to the CA; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
• C.Request a certificate from the CA, and import the CA-signed certificate into ISE.
• D.Generate a CSR; export the CSR to the local file system and send to the CA; download the certificate from the CA, and bind the CA-signed certificate with its private key.

When does the browser get redirected in WebAuth?

• A.when there is a request for a web page
• B.when the Cisco NAC Agent reaches the Policy Service node
• C.before getting the IP address
• D.when there is a request for DNS

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

• A.UDP/TCP 389
• B.UDP 123
• C.TCP 445
• D.UDP 53
• E.TCP 88