CCIE Security
Domain 4Objective 18
4.18 Cisco IBNS 2.0 (C3PL) for Authentication, Access Control, and User Policy Enforcement CCIE-SECURITY Practice Questions (Page 10)
Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)
49questions here
10free pages
7concepts
25%of the exam
Questions 46–49
- 46
An enterprise is integrating IBNS 2.0 with Cisco ISE. The security team wants to assign different VLANs based on the user's Active Directory group. ISE sends the VLAN in the RADIUS Access-Accept. The switch must use this attribute to dynamically assign the VLAN. Which configuration is required on the switch to enable dynamic VLAN assignment?
Select an answer first - 47
A hotel offers both wired and wireless guest access. For wired ports in the lobby, guests must open a browser and accept terms of service before getting internet access. The network uses IBNS 2.0. Which authentication method should be configured for these wired guest ports?
Select an answer first - 48
A company uses IBNS 2.0 to enforce access control. Employees in the finance department must be placed in VLAN 10 and get access to the ERP system. Contractors must be placed in VLAN 20 and get limited access. The RADIUS server returns the VLAN and a dACL. The switch's C3PL policy map has a class for finance and a class for contractors. What is the correct way to apply the dACL for contractors?
Select an answer first - 49
A corporation requires that all employees reauthenticate every 12 hours to ensure credentials are still valid. The IBNS 2.0 policy is configured with a session-timeout of 43200 seconds. However, the network team notices that sessions are not being reauthenticated as expected. What is the most likely reason?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to CCIE-SECURITY
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.