An administrator adds a new network device to the Cisco ISE configuration to authenticate endpoints to the network. The RADIUS test fails after the administrator configures all of the settings in Cisco ISE and adds the proper configurations to the switch. What is the issue"?

1. A. The endpoint profile is showing as "unknown."
2. B. The endpoint does not have the appropriate credentials for network access.
3. C. The shared secret is incorrect on the switch or on Cisco ISE.
4. D. The certificate on the switch is self-signed not a CA-provided certificate.

Correct Answer: B

A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest network after that period. Which configuration is causing this problem?

1. A. The RADIUS policy set for guest access is set to allow repeated authentication of the same device.
2. B. The length of access is set to 7 days in the Guest Portal Settings.
3. C. The Endpoint Purge Policy is set to 30 days for guest devices.
4. D. The Guest Account Purge Policy is set to 15 days.

Correct Answer: C

An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network They have multiple vendors’ firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this What should be done to enable this type of posture check?

1. A. Use the file registry condition to ensure that the firewal is installed and running appropriately.
2. B. Use a compound condition to look for the Windows or Mac native firewall applications.
3. C. Enable the default rewall condition to check for any vendor rewall application.
4. D. Enable the default application condition to identify the applications installed and validade the rewall app.

Correct Answer: C
https://www.youtube.com/watch?v=6Kj8P8Hn7dY&t=109s&ab_channel=CiscoISE-IdentityServicesEngine

A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

1. A. SGT
2. B. dACL
3. C. VLAN
4. D. RBAC

Correct Answer: A

An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints Which action accomplishes this task for VPN users?

1. A. Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE.
2. B. Configure the compliance module to be downloaded from within the posture policy.
3. C. Push the compliance module from Cisco FTD prior to attempting posture.
4. D. Use a compound posture condition to check for the compliance module and download if needed.

Correct Answer: A