Which two options are valid for configuring IEEE 802.1AE MACSec between switches in a TrustSec network? (Choose two.)

A. manually on links between supported switches
B. in the Cisco Identity Services Engine
C. in the global configuration of a TrustSec non-seed switch
D. dynamically on links between supported switches
E. in the Cisco Secure Access Control System
F. in the global configuration of a TrustSec seed switch

Answer : AD

How frequently does the Profiled Endpoints dashlet refresh data?

A. every 30 seconds
B. every 60 seconds
C. every 2 minutes
D. every 5 minutes

Answer : B

An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?

A. member of
B. group
C. class
D. person

Answer: A

Which command can check a AAA server authentication for server group Group1, user cisco,and password cisco555 on a Cisco ASA device?

A. ASA# test aaa-server authentication Group1 username cisco password cisco555

B. ASA# test aaa-server authentication group Group1 username cisco password cisco555

C. ASA# aaa-server authorization Group1 username cisco password cisco555

D. ASA# aaa-server authentication Group1 roger cisco555

Answer: A

Which identity store option allows you to modify the directory services that run on TCP/IP?

A. Lightweight Directory Access Protocol

B. RSA SecurID server

C. RADIUS

D. Active Directory

Answer: A

In an 802.1X authorization process, a network access device provides which three functions?(Choose three.)

A. Filters traffic prior to authentication

B. Passes credentials to authentication server

C. Enforces policy provided by authentication server

D. Hosts a central web authentication page

E. Confirms supplicant protocol compliance

F. Validates authentication credentials

Answer: A,B,C

Which two conditions are valid when configuring ISE for posturing? (Choose two.)

A. Dictionary

B. memberOf

C. Profile status

D. File

E. Service

Answer: D,E

Cisco ISE distributed deployments support which three features? (Choose three.)

A. global implementation of the profiler service CoA
B. global implementation of the profiler service in Cisco ISE
C. configuration to send system logs to the appropriate profiler node
D. node-specific probe configuration
E. server-specific probe configuration
F. NetFlow probes

Answer: A,C,D

What is a required step when you deploy dynamic VLAN and ACL assignments?

A. Configure the VLAN assignment.

B. Configure the ACL assignment.

C. Configure Cisco IOS Software 802.1X authenticator authorization.

D. Configure the Cisco IOS Software switch for ACL assignment.

Answer: C

Which two EAP types require server side certificates? (Choose two.)

A. EAP-TLS

B. PEAP

C. EAP-MD5

D. LEAP

E. EAP-FAST

F. MSCHAPv2

Answer: A,B