Question 91
Which use case validates a change of authorization?
A. An endpoint that is disconnected from the network is discovered.
B. Endpoints are created through device registration for the guests.
C. An endpoint profiling policy is changed for authorization policy.
D. An authenticated, wired EAP-capable endpoint is discovered.
Question 92
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
A. block list
B. unknown
C. allow list
D. profiled
E. endpoint
Question 93
Which two probes must be enabled for the ARP cache to function in the Cisco ISE profiling service so that a user can reliably bind the IP addresses and MAC addresses of endpoints? (Choose two.)
A. SNMP
B. HTTP
C. RADIUS
D. DHCP
E. NetFlow
Question 94
A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA.
Which action does the CoA perform?
A. It terminates the client session.
B. It applies the downloadable ACL provided in the CoA.
C. It triggers the NAD to reauthenticate the client.
D. It applies new permissions provided in the CoA to the client session.
Question 95
A new employee just connected their workstation to a Cisco IP phone. The network administrator wants to ensure that the Cisco IP phone remains online when the user disconnects their workstation from the corporate network.
Which CoA configuration meets this requirement?
A. Reauth
B. Disconnect
C. No CoA
D. Port Bounce
Question 96
Which two ports do network devices typically use for CoA? (Choose two.)
A. 19005
B. 443
C. 3799
D. 8080
E. 1700
Question 97
Which three default endpoint identity groups does Cisco ISE create? (Choose three.)
A. endpoint
B. unknown
C. block list
D. profiled
E. allow list
Question 98
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network.
Which node should be used to accomplish this task?
A. policy service
B. monitoring
C. primary policy administrator
D. pxGrid
Question 99
An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types.
Which probe should be used to accomplish this task?
A. DHCP
B. DNS
C. NMAP
D. RADIUS
Question 100
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected.
Which service should be used to accomplish this task?
A. guest access
B. profiling
C. posture
D. client provisioning
