4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a Cisco ISE deployment, which node persona is responsible for providing the administrative web interface and managing all configuration changes?

   • APolicy Service Node (PSN)
   • BpxGrid Persona
   • CMonitoring and Troubleshooting Node (MNT)
   • DPolicy Administration Node (PAN)
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What type of data is replicated from Policy Service Nodes (PSNs) to the Monitoring and Troubleshooting Node (MNT) in a Cisco ISE deployment?

   • AConfiguration policies
   • BNetwork device configurations
   • CAuthentication and accounting logs
   • DAdministrative user credentials
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In a Cisco ISE deployment with a primary and secondary PAN, what happens if the primary PAN fails?

   • AThe MNT node takes over as the PAN.
   • BAll PSNs stop processing authentication requests.
   • CThe deployment becomes read-only until the primary PAN is restored.
   • DThe secondary PAN automatically becomes active and takes over administration.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   How does having multiple Policy Service Nodes (PSNs) contribute to high availability in Cisco ISE?

   • AIt ensures that the PAN never fails.
   • BIt eliminates the need for a secondary PAN.
   • CIf one PSN fails, other PSNs can continue to handle authentication requests.
   • DIt provides backup for the MNT node's logging functions.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which method is commonly used to distribute authentication requests across multiple Policy Service Nodes (PSNs) in Cisco ISE?

   • AUsing the PAN to forward authentication requests to PSNs.
   • BManually assigning each network device to a specific PSN.
   • CConfiguring network devices with a RADIUS server group that includes all PSNs.
   • DUsing a DNS round-robin to resolve the ISE hostname to different PSN IPs.
   Reveal Solution Discussion Select an answer first