6.3 Configure Network Access Control Mechanisms Such as 802.1X and MAB with Cisco Identity Services Engine 350-701 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A network engineer is configuring a switch for 802.1X with ISE. The switch has the following configuration: 'aaa new-model', 'radius server ISE', 'address ipv4 10.1.1.10', 'key cisco123', 'aaa authentication dot1x default group radius', 'aaa authorization network default group radius'. The ISE policy set is configured correctly. Users can authenticate and receive the correct VLAN. However, the switch logs show periodic 'RADIUS server ISE' timeouts. What is the most likely cause?

   • AThe RADIUS shared secret is incorrect, causing intermittent timeouts.
   • BThe switch is configured with a RADIUS timeout that is too short for the ISE response time.
   • CThe switch is sending RADIUS accounting requests that ISE is not configured to process.
   • DThe ISE node is overloaded and cannot respond to all RADIUS requests in time.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which protocol does Cisco ISE use to communicate with network access devices when acting as the authentication server for 802.1X and MAB?

   • ASNMP
   • BLDAP
   • CRADIUS
   • DTACACS+
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In Cisco ISE, what is the purpose of a policy set?

   • ATo define the conditions and results for network access decisions
   • BTo store user credentials
   • CTo configure RADIUS server settings
   • DTo group network devices for monitoring
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the purpose of the 'radius server' configuration on a Cisco network device when integrating with ISE?

   • ATo enable SNMP monitoring on the device
   • BTo set the default VLAN for access ports
   • CTo define the ISE server's IP address and shared secret
   • DTo configure the device's hostname
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A user's PC fails 802.1X authentication on a wired port. The switch shows the port in 'unauthorized' state. ISE live logs show the authentication failed with the reason 'Supplicant stopped responding to EAP-Request/Identity'. The user's PC is running the Cisco AnyConnect supplicant. What is the most likely cause?

   • AThe supplicant is not configured with the correct EAP method.
   • BThe RADIUS shared secret is incorrect on the switch.
   • CThe supplicant is disabled or not running on the PC.
   • DThe switch port is configured with 'authentication port-control auto', but the PC is not connected properly.
   Reveal Solution Discussion Select an answer first