Implementing and Configuring Cisco Identity Service Engine - SISE (500-254) Free Practice Test

Question 1

Which of these is NOT a high-availability option that is available for Cisco ISE deployments?

A. In the event of failure of the Primary Monitoring node, the standby instance automatically becomes active.

B. Stateless failover of Inline Posture nodes

C. In the event of failure of the Primary Administration node, the standby instance automatically becomes active.

D. Clustering of Policy Service nodes to provide N+1 redundancy

Correct Answer: C

Question 2

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

A. UDP 53

B. UDP/TCP 389

C. UDP 123

D. TCP 88

E. TCP 445

Correct Answer: A

Question 3

What is the default period for Cisco ISE to automatically purge expired guest accounts?

A. 15 days

B. 1 day

C. 7 days

D. immediately after expiration

E. 30 days

Correct Answer: A

Question 4

What is the default authorization rule in Cisco ISE?

A. Redirect users to CWA

B. Deny all access

C. Permit all access

D. Redirect users to LWA

Correct Answer: C

Question 5

Which of these is not a method that is used to obtain Cisco ISE profiling data?

A. active scans

B. DNS

C. NetFlow

D. QoS

E. RADIUS

F. SNMP query

Correct Answer: D

Welcome to TestSimulate