500-254 by Cisco Actual Free Exam Q&As

Cisco Implementing and Configuring Cisco Identity Service Engine - SISE - 500-254 Exam Practice Test

Question 1

What is the cisco-av-pair automatically set to for an Inline Posture node profile?

A. SessionIdValue&action=cpp B. ipep-compliant=true C. inline-posture=true D. ipep-authz=true

Discussion 0

Correct Answer: D Vote an answer

Question 2

What is the default period for Cisco ISE to automatically purge expired guest accounts?

A. 30 days B. 7 days C. immediately after expiration D. 15 days E. 1 day

Discussion 0

Correct Answer: D Vote an answer

Question 3

What is the limit of groups that Cisco ISE can retrieve from an Active Directory?

A. 200 B. 100 C. 10 D. 150 E. 50

Discussion 0

Correct Answer: B Vote an answer

Question 4

What are two methods to verify that Cisco ISE is properly connected to AD? (Choose two.)

A. Use ktpass to determine if the Kerberos ticket is valid. B. Use the Test Connection feature in the Cisco ISE External Identity Sources Active Directory. C. Use the ISE Dashboard Summary alarms. D. View the Active Directory Log /opt/CSCOcmp/logs/ad_agent.log.

Discussion 0

Correct Answer: B,D Vote an answer

Question 5

Which global command is used to activate 802.1X on a switch?

A. dot1x enable B. dot1x system-auth-control C. dot1x switchport enable D. dot1x service start

Discussion 0

Correct Answer: B Vote an answer