4.7 Cisco ISE Integration with External Identity Sources CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In Cisco ISE, how can LDAP attributes be used in authorization policies?

   • ABy mapping LDAP attributes to internal ISE attributes that can be referenced in policy conditions
   • BBy configuring LDAP to send authorization attributes via RADIUS
   • CBy directly writing LDAP attribute names in authorization policy conditions
   • DBy using LDAP attributes as the only source for authorization, bypassing ISE policy
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a key benefit of integrating Cisco ISE with Active Directory?

   • AIt eliminates the need for any other identity source in the network
   • BIt provides real-time malware detection for endpoints
   • CIt automatically configures all network devices
   • DIt allows ISE to leverage existing AD user and group information for authentication and authorization
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the first step in integrating Cisco ISE with Active Directory?

   • AJoining ISE to the AD domain
   • BConfiguring RADIUS attributes
   • CCreating a local user account in ISE
   • DInstalling a certificate on the AD server
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When configuring an Active Directory identity source in Cisco ISE, what is the purpose of the 'machine authentication' setting?

   • ATo authenticate the AD domain controller to ISE
   • BTo authenticate end-user machines before they access the network
   • CTo authenticate the ISE node itself to the AD domain using a computer account
   • DTo authenticate the ISE admin user
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A university is deploying Cisco ISE for wireless authentication. Their student directory is hosted on OpenLDAP, and they want to authenticate students using their existing credentials. The LDAP server supports simple bind. What should you configure in ISE to integrate with this directory?

   • AUse the internal ISE user database and manually create student accounts.
   • BConfigure an external RADIUS server to proxy authentication to the LDAP server.
   • CAdd an LDAP identity source with the server IP, port 389, and base DN for the student OU.
   • DAdd an Active Directory identity source and join the ISE node to the university's AD domain.
   Reveal Solution Discussion Select an answer first