An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
A)

B)

C)

D)

1. A. Option A
2. B. Option B
3. C. Option C
4. D. Option D

Correct Answer: D

What is a function of client provisioning?

1. A. Client provisioning ensures that endpoints receive the appropriate posture agents.
2. B. Client provisioning checks a dictionary attribute with a value.
3. C. Client provisioning ensures an application process is running on the endpoint.
4. D. Client provisioning checks the existence, date, and versions of the file on a client.

Correct Answer: A
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_client_prov.html#:~:text=After%20

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

1. A. The primary node restarts
2. B. The secondary node restarts.
3. C. The primary node becomes standalone
4. D. Both nodes restart.

Correct Answer: D
https://www.cisco.com/c/en/us/td/docs/security/ise/1-1-1/installation_guide/ise_install_guide/ise_deploy.html if your deployment has two nodes and you deregister the secondary node, both nodes in this
primary-secondary pair are restarted. (The former primary and secondary nodes become standalone.)

An administrator is configuring RADIUS on a Cisco switch with a key set to Cisc403012128 but is receiving the error “Authentication failed: 22040 Wrong password or invalid shared secret. “what must be done to address this issue?

1. A. Add the network device as a NAD inside Cisco ISE using the existing key.
2. B. Configure the key on the Cisco ISE instead of the Cisco switch.
3. C. Use a key that is between eight and ten characters.
4. D. Validate that the key is correct on both the Cisco switch as well as Cisco ISE.

Correct Answer: D

An administrator is configuring a switch port for use with 802 1X What must be done so that the port will allow voice and multiple data endpoints?

1. A. Configure the port with the authentication host-mode multi-auth command
2. B. Connect the data devices to the port, then attach the phone behind them.
3. C. Use the command authentication host-mode multi-domain on the port
4. D. Connect a hub to the switch port to allow multiple devices access after authentication

Correct Answer: A