4.7 Cisco ISE Integration with External Identity Sources CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When is it appropriate to use an external RADIUS server as an identity source in Cisco ISE?

   • AWhen you need to authenticate users with certificates
   • BWhen you want to eliminate all external identity sources
   • CWhen there is no Active Directory or LDAP server available
   • DWhen an organization has an existing RADIUS server that must remain the source of truth for authentication
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following settings must be configured when adding an external RADIUS server in Cisco ISE?

   • ACertificate authority and certificate template
   • BServer IP address and shared secret
   • CDomain name and NetBIOS name
   • DBase DN and directory structure
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the default authentication port for an external RADIUS server in Cisco ISE?

   • A389
   • B1812
   • C1645
   • D636
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   When Cisco ISE proxies an authentication request to an external RADIUS server, what does ISE do with the response?

   • AIt stores the response for later use
   • BIt forwards the response back to the network access device (NAD)
   • CIt discards the response and generates its own
   • DIt sends the response to the AD server
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What happens if the external RADIUS server does not respond to a proxied authentication request in Cisco ISE?

   • AISE may retry the request or fail the authentication depending on its configuration
   • BISE generates an Access-Reject immediately
   • CISE forwards the request to the next external RADIUS server without any delay
   • DISE automatically accepts the user
   Reveal Solution Discussion Select an answer first