- (Exam Topic 3)
Which Cisco security solution secures public, private, hybrid, and community clouds?

1. A. Cisco ISE
2. B. Cisco ASAv
3. C. Cisco Cloudlock
4. D. Cisco pxGrid

Correct Answer: C

- (Exam Topic 1)
Under which two circumstances is a CoA issued? (Choose two)

1. A. A new authentication rule was added to the policy on the Policy Service node.
2. B. An endpoint is deleted on the Identity Service Engine server.
3. C. A new Identity Source Sequence is created and referenced in the authentication policy.
4. D. An endpoint is profiled for the first time.
5. E. A new Identity Service Engine server is added to the deployment with the Administration persona

Correct Answer: BD
The profiling service issues the change of authorization in the following cases:– Endpoint deleted—When an endpoint is deleted from the Endpoints page and the endpoint is disconnectedor removed from the network.An exception action is configured—If you have an exception action configured per profile that leads to anunusual or an unacceptable event from that endpoint. The profiling service moves the endpoint to thecorresponding static profile by issuing a CoA.– An endpoint is profiled for the first time—When an endpoint is not statically assigned and profiled for the first time; for example, the profile changes from an unknown to a known profile.+ An endpoint identity group has changed—When an endpoint is added or removed from an endpoint identity group that is used by an authorization policy.The profiling service issues a CoA when there is any change in an endpoint identity group, and the endpoint identity group is used in the authorization policy for the following:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide

- (Exam Topic 3)
Which IETF attribute is supported for the RADIUS CoA feature?

1. A. 24 State
2. B. 30 Calling-Station-ID
3. C. 42 Acct-Session-ID
4. D. 81 Message-Authenticator

Correct Answer: A

- (Exam Topic 3)
Which technology limits communication between nodes on the same network segment to individual applications?

1. A. serverless infrastructure
2. B. microsegmentation
3. C. SaaS deployment
4. D. machine-to-machine firewalling

Correct Answer: B

- (Exam Topic 1)
Which type of attack is social engineering?

1. A. trojan
2. B. phishing
3. C. malware
4. D. MITM

Correct Answer: B
Phishing is a form of social engineering. Phishing attacks use email or malicious web sites to
solicit personal,often financial, information. Attackers may send email seemingly from a reputable credit card company orfinancial institution that requests account information, often suggesting that there is a problem.