Which of the following is a limitation of RADIUS compared to TACACS+ for device administration?

RADIUS encrypts the entire packet

RADIUS does not support authentication

RADIUS does not support accounting

RADIUS does not support per-command authorization

In the context of Cisco ISE as an AAA server for device administration, what does the 'accounting' component provide?

Encryption of administrative traffic

Records of administrative actions and sessions

What is the primary purpose of a device administration policy set in Cisco ISE?

To set up TACACS+ server communication parameters

To configure the ISE database for user accounts

To define which network devices are managed by ISE

To control access to network devices based on conditions

A network team manages a fleet of Cisco IOS routers and switches. They want to centralize administrative access using Cisco ISE, but they need to enforce different command permissions for network engineers versus helpdesk staff. The helpdesk should only be able to run 'show' commands, while engineers can run configuration commands. Which two ISE components must be configured together to achieve this?

Policy sets and exception rules

Device groups and network device AAA settings

Authentication policies and identity source sequences

Command sets and authorization policies

CCIE Security

Domain 4Objective 3

4.3 Cisco Devices for Administrative Access with Cisco ISE CCIE-SECURITY Practice Questions (Page 4)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 53 practice questions to prepare you well beyond it. (estimate)

53questions here

11free pages

10concepts

25%of the exam

Questions 16–20

16foundation · easy
Which of the following is a limitation of RADIUS compared to TACACS+ for device administration?
Select an answer first
17foundation · easy
In the context of Cisco ISE as an AAA server for device administration, what does the 'accounting' component provide?
Select an answer first
18foundation · easy
Which AAA component in Cisco ISE determines what an authenticated user is allowed to do on a network device?
Select an answer first
19foundation · easy
What is the primary purpose of a device administration policy set in Cisco ISE?
Select an answer first
20application · medium
A network team manages a fleet of Cisco IOS routers and switches. They want to centralize administrative access using Cisco ISE, but they need to enforce different command permissions for network engineers versus helpdesk staff. The helpdesk should only be able to run 'show' commands, while engineers can run configuration commands. Which two ISE components must be configured together to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

4.3 Cisco Devices for Administrative Access with Cisco ISE CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

Which of the following is a limitation of RADIUS compared to TACACS+ for device administration?

In the context of Cisco ISE as an AAA server for device administration, what does the 'accounting' component provide?

Which AAA component in Cisco ISE determines what an authenticated user is allowed to do on a network device?

What is the primary purpose of a device administration policy set in Cisco ISE?

Keep studying — 4.0 Identity Management, Information Exchange, and Access Control