What is the purpose of a certificate template in Cisco ISE for certificate provisioning?

To store the private keys of endpoints

To define the authentication policy for certificate-based access

To specify the attributes and extensions that will be included in the issued certificate

To configure the RADIUS server settings for certificate authentication

When Cisco ISE validates a certificate, what does it check to ensure the certificate is trusted?

The certificate has a valid IP address in the SAN

The certificate is signed by a trusted root CA and the chain is intact

The certificate's public key matches the private key on the endpoint

The certificate was issued by the internal CA only

In a Cisco ISE authentication policy, which condition is used to match certificate-based authentication?

Network Access: User Name equals 'certificate'

Network Access: Calling Station ID equals 'cert'

Network Access: Device Type equals 'Certificate'

Network Access: Authentication Method equals 'Certificate'

What is the purpose of an authorization profile in a certificate-based authentication policy in Cisco ISE?

To specify the access permissions and VLAN for the authenticated user or device

To configure the CA server settings

To set the EAP method for the session

To define the certificate template for the endpoint

CCIE Security

Domain 4Objective 12

4.12 Certification-Based Authentication Using Cisco ISE CCIE-SECURITY Practice Questions (Page 3)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

25%of the exam

Questions 11–15

11foundation · easy
What is the purpose of a certificate template in Cisco ISE for certificate provisioning?
Select an answer first
12foundation · easy
When Cisco ISE validates a certificate, what does it check to ensure the certificate is trusted?
Select an answer first
13foundation · easy
Which mechanism does Cisco ISE use to check if a certificate has been revoked?
Select an answer first
14foundation · easy
In a Cisco ISE authentication policy, which condition is used to match certificate-based authentication?
Select an answer first
15foundation · easy
What is the purpose of an authorization profile in a certificate-based authentication policy in Cisco ISE?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.