If an administrator is authenticated but cannot execute certain commands on a device, what is the likely issue?

Authorization policy is denying the commands

The user's password is incorrect

In Cisco ISE, what is the purpose of defining device groups when configuring TACACS+ for device administration?

To store device configuration backups

To group network devices for easier policy assignment

To assign IP addresses to devices

What is the role of command sets in Cisco ISE TACACS+ configuration for device administration?

They determine the IP address of the TACACS+ server

They enable accounting logs for device sessions

They define which CLI commands an administrator can execute

They specify the authentication protocol for device login

When is RADIUS more appropriate than TACACS+ for device administration?

When you need to separate authentication and authorization

When you need to encrypt the entire TACACS+ packet

When you need to authorize specific CLI commands

When you need to use the same server for device administration and network access

CCIE Security

Domain 4Objective 3

4.3 Cisco Devices for Administrative Access with Cisco ISE CCIE-SECURITY Practice Questions (Page 3)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

25%of the exam

Questions 11–15

11foundation · easy
Which administrative access method typically uses a web browser and HTTPS to manage a Cisco device, and can be integrated with Cisco ISE for authentication?
Select an answer first
12foundation · easy
If an administrator is authenticated but cannot execute certain commands on a device, what is the likely issue?
Select an answer first
13foundation · easy
In Cisco ISE, what is the purpose of defining device groups when configuring TACACS+ for device administration?
Select an answer first
14foundation · easy
What is the role of command sets in Cisco ISE TACACS+ configuration for device administration?
Select an answer first
15foundation · easy
When is RADIUS more appropriate than TACACS+ for device administration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.