Online Access Free 500-254 Practice Test

What is the recommended time zone for Cisco ISE installations?

• A.customer headquarters time zone
• B.Coordinated Universal Time
• C.customer local time zone
• D.Pacific time

Which two statements are correct regarding Cisco ISE Guest Services? (Choose two.)

• A.A guest administration user interface action can be made from the primary and secondary administration interfaces.
• B.Guest portals must be located on the same secondary node where Cisco ISE network access is configured to handle RADIUS requests in the NAD.
• C.Multiportal uploads to the primary node are replicated to the secondary node and installed as part of the standard data replication system.
• D.The configuration mode for guest services can be different for each node in the deployment.

Refer to the exhibit.

Which two statements are true about identity groups and their use in an authorization policy? (Choose two.)

• A.The Whitelist identity group that is shown in the exhibit can be used to contain MAC addresses that are statically entered into Cisco ISE.
• B.Only user identity groups can be created in Cisco ISE.
• C.User identity groups can reference internal and external stores.
• D.The Whitelist identity group is one of the predefined identity groups in Cisco ISE.
• E.Identity groups can only reference internal endpoints and users in the local database.

What is the default authorization rule in Cisco ISE?

• A.Redirect users to CWA
• B.Deny all access
• C.Redirect users to LWA
• D.Permit all access

What is the process for Cisco ISE to obtain a signed certificate from a CA?

• A.Request a certificate from the CA, and import the CA-signed certificate into ISE.
• B.Submit a CSR to the CA; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
• C.Generate a CSR; download the certificate from the CA; bind the CA-signed certificate with its private key, and import the CA-signed certificate into ISE.
• D.Generate a CSR; export the CSR to the local file system and send to the CA; download the certificate from the CA, and bind the CA-signed certificate with its private key.