4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 10)

Questions 46–50

1. 46application · easy

   An administrator changes a network access policy on the primary PAN in a distributed ISE deployment. How do the other nodes receive the updated policy?

   • AThe primary PAN pushes the configuration to all secondary PANs, PSNs, and MNT nodes automatically
   • BEach PSN must be manually updated by importing the configuration file
   • CThe MNT node replicates the configuration to all PSNs after the change is made
   • DThe secondary PAN must be promoted to primary to trigger synchronization
   Reveal Solution Discussion Select an answer first
2. 47application · easy

   A company has a distributed ISE deployment with a primary and secondary PAN. The primary PAN experiences a hardware failure. What happens to administrative access and policy changes?

   • APSNs take over the PAN role automatically
   • BThe secondary PAN automatically becomes active and takes over administrative functions
   • CThe MNT node becomes the new PAN
   • DAll administrative functions stop until the primary PAN is repaired
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   A hospital is experiencing slow authentication responses during peak hours. They have a distributed ISE deployment with two PSNs and a PAN. They need to handle more authentication traffic without changing the existing hardware. What should they do?

   • AAdd more PSNs to the deployment and distribute the load across them
   • BConfigure the existing PSNs to use more CPU cores for authentication
   • CEnable MNT to handle authentication requests
   • DUpgrade the PAN to a larger appliance
   Reveal Solution Discussion Select an answer first
5. 49application · easy

   A security team wants to deploy Cisco ISE to provide both network access control and real-time context sharing with other security tools. They plan to use a distributed deployment. Which node persona is specifically responsible for sharing context and enabling integrations like pxGrid?

   • ApxGrid Persona
   • BPolicy Administration Node (PAN)
   • CMonitoring and Troubleshooting Node (MNT)
   • DPolicy Service Node (PSN)
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A multinational company wants to deploy ISE across three regions. They need to maintain local policy enforcement and authentication, but want a single global administrative point. What deployment model should they use?

   • AStandalone deployment in each region
   • BHierarchical deployment with a primary PAN at headquarters and secondary PANs in each region
   • CDistributed deployment with a PAN and MNT in each region
   • DDistributed deployment with a single PAN and PSNs in each region
   Reveal Solution Discussion Select an answer first