500-254 by Cisco Valid Free Exam Practice Test

Cisco Implementing and Configuring Cisco Identity Service Engine - SISE - 500-254 Exam Practice Test

Question 1

Which global command is used to activate 802.1X on a switch?

A. dot1x system-auth-control B. dot1x enable C. dot1x switchport enable D. dot1x service start

Correct Answer: A

Question 2

How are access control lists implemented on a Cisco WLC in a Cisco ISE authorization policy?

A. Named access lists are pushed down to the WL B. Named access lists are configured in Cisco ISE. C. Dynamic access lists are configured in Cisco ISE. D. Named access lists are configured on the WLC.

Correct Answer: D

Question 3

Which two EAP authentication methods require only a server certificate? (Choose two.)

A. EAP-GTC B. EAP-MD5 C. EAP-FAST D. PEAP-MS-CHAPv2 E. EAP-TLS

Correct Answer: A,D

Question 4

Inline Posture nodes support which enforcement mechanisms?

A. security group access B. downloadable ACLs C. dynamic ACLs D. VLAN assignment

Correct Answer: B

Question 5

What are the Cisco ISE posture building blocks?

A. posture condition, posture rules, role requirements B. network access devices, Policy Service node, Administration node C. posture check, posture rules, posture requirement, role requirements D. posture condition, compound posture condition, posture requirements, posture policy

Correct Answer: D