What is the primary role of LDAP in Cisco ISE as an external identity source?

To replace the internal ISE identity store entirely, eliminating the need for any local user database

To manage the network infrastructure devices that ISE controls

To provide a real-time feed of security alerts to ISE for threat detection

To provide a centralized directory for storing user credentials and attributes that ISE can query for authentication and authorization

In Cisco ISE, after joining an AD domain, what must be done to use AD groups in authorization policies?

Configure a RADIUS server to proxy group information

Manually create the same groups in ISE

Retrieve the directory groups from AD

How does Cisco ISE authenticate a user against Active Directory?

By sending the user's password to the AD server in clear text via RADIUS

By using the user's certificate to authenticate against AD

By comparing the user's password hash stored in ISE with the AD hash

By using Kerberos or LDAP to validate the user's credentials against the AD domain

In Cisco ISE authorization policies, how are AD groups typically used?

As the only attribute allowed in authorization policies

As conditions to match against the user's group membership

To set the shared secret for RADIUS

To define the network device's IP address

What is the purpose of configuring an external RADIUS server as an identity source in Cisco ISE?

To manage network device configurations

To provide a backup for the ISE internal database

To allow ISE to proxy authentication requests to an existing RADIUS infrastructure

To replace the internal ISE policy engine

CCIE Security

Domain 4Objective 7

4.7 Cisco ISE Integration with External Identity Sources CCIE-SECURITY Practice Questions (Page 1)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 59 practice questions to prepare you well beyond it. (estimate)

59questions here

12free pages

10concepts

25%of the exam

Questions 1–5

1foundation · easy
What is the primary role of LDAP in Cisco ISE as an external identity source?
Select an answer first
2foundation · easy
In Cisco ISE, after joining an AD domain, what must be done to use AD groups in authorization policies?
Select an answer first
3foundation · easy
How does Cisco ISE authenticate a user against Active Directory?
Select an answer first
4foundation · easy
In Cisco ISE authorization policies, how are AD groups typically used?
Select an answer first
5foundation · easy
What is the purpose of configuring an external RADIUS server as an identity source in Cisco ISE?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.