500-254 | Which statement is true about 802.1X…

Question: 21

Which statement is true about 802.1X closed mode?

A. It is the default configuration of an 802.1X-enabled switch port.
B. Only EAPOL traffic is allowed until the authentication process is finished.
C. DNS and DHCP are allowed before authentication.
D. Cisco Discovery Protocol is allowed before authentication.
E. Only EAPOL and Cisco Discovery Protocol are allowed until the authentication process completes.

Answer: D

500-254|Which two statements are correct regarding Cisco ISE Guest Services?

Question: 19

Which two statements are correct regarding Cisco ISE Guest Services? (Choose two.)

A. Guest portals must be located on the same secondary node where Cisco ISE network access is configured to handle RADIUS requests in the NAD.
B. A guest administration user interface action can be made from the primary and secondary administration interfaces.
C. The configuration mode for guest services can be different for each node in the deployment.
D. Multiportal uploads to the primary node are replicated to the secondary node and installed as part of the standard data replication system.

Answer: A,D

500-254 Sample Question : 11

Question : 11

Which two EAP authentication methods require only a server certificate? (Choose two.)

A. EAP-TLS
B. EAP-FAST
C. EAP-GTC
D. EAP-MD5
E. PEAP-MS-CHAPv2

Answer : C,E

500-254 Sample Question : 10

Question : 10

What is the recommended time zone for Cisco ISE installations?

A. customer local time zone
B. customer headquarters time zone
C. Pacific time
D. Coordinated Universal Time

Answer : D

500-254 Sample Question : 9

Question : 9

What is the default period for Cisco ISE to automatically purge expired guest accounts?

A. immediately after expiration
B. 1 day
C. 7 days
D. 15 days
E. 30 days

Answer: D

500-254 Sample Question : 8

Question : 8

The 802.1X protocol supports which two port types? (Choose two.)

A. Layer 2 access port
B. trunk port
C. dynamic port
D. Layer 3 access port
E. EtherChannel port

Answer: A,D

500-254 Sample Question : 7

Question : 7

Which two dictionary groups does Cisco ISE provide? (Choose two.)

A. system-defined
B. RADIUS vendor
C. RADIUS IETF
D. user-defined
E. LDAP
F. Active Directory

Answer: A,D

500-254 Sample Question : 6

Question : 6

What is the Cisco ISE default admin login name and password?

A. admin/admin
B. admin/cisco
C. ISEAdmin/admin
D. admin/no default password—the admin password is configured at setup

Answer: D

500-254 Sample Question : 5

Question : 5

The default Cisco ISE node configuration has which role or roles enabled by default?

A. Administration only
B. Inline Posture only
C. Administration and Policy Service
D. Policy Service, Monitoring, and Administration

Answer: D

Free 500-254 Exam Questions PDF CISCO

Do you want to pass your 500-254 exam and want to get free 500-254 braindumps questions answers? Click on this pdf file and download the practice test questions that you are going to see in your real exam. This is free 500-254 dumps download.

Click To Download!

Free 500-254 PDF Download

Free 500-254 Study Material exam questions answers. These Q&A online braindumps are free to use for your 500-254 Study Material practice test. We keep adding more questions so keep coming to get dumps.

Leave a Comment.