4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   In a multi-node Cisco ISE deployment, how is configuration data (e.g., policies, network devices) propagated from the primary PAN to other nodes?

   • AIt is manually copied by an administrator to each node.
   • BIt is sent via email to each node's administrator.
   • CIt is stored only on the PAN and accessed remotely by other nodes.
   • DIt is automatically replicated via a synchronization process.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A university is expanding its Cisco ISE deployment from a single PSN to three PSNs to handle increased wireless authentication load during peak registration periods. The network team wants to ensure that the load is distributed evenly across the PSNs without requiring clients to manually select a PSN. Which approach should they implement?

   • AUse the ISE built-in load balancer feature on the primary PSN to distribute requests to secondary PSNs.
   • BConfigure a RADIUS load balancer in front of the PSNs and use the same shared secret for all PSNs.
   • CAssign each PSN a different IP address and configure the wireless controllers to use a different PSN for each SSID.
   • DEnable PAN-based load balancing by configuring the PAN to proxy all RADIUS requests to the least-loaded PSN.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is deploying ISE with a dedicated MNT node. The network team wants to ensure that all PSNs send their logs to the MNT node. What must be configured on the PSNs?

   • AThe MNT node must be set as the 'Primary' MNT in the deployment.
   • BThe PSNs must be configured to use the MNT node as their 'RADIUS Accounting' server.
   • CThe MNT node must be added as a 'Log Collector' in the PSN's settings.
   • DThe PSNs must be configured with the MNT node's IP address as the 'Monitoring' server.
   Reveal Solution Discussion Select an answer first
5. 19expert · medium

   A financial institution has a distributed ISE deployment with a primary PAN and a secondary PAN in the same data center. They also have two PSNs in the same data center and two PSNs in a remote data center. The primary PAN fails due to a hardware issue. The secondary PAN takes over, but the administrator notices that the secondary PAN is not receiving configuration updates from the primary PAN. What is the most likely cause?

   • AThe secondary PAN is not configured with the same admin password as the primary PAN.
   • BThe primary PAN is still powered on but not responding to network requests, so the secondary PAN cannot sync.
   • CThe MNT node is down, preventing the secondary PAN from syncing.
   • DThe secondary PAN was not configured as a 'Secondary Admin' node in the deployment.
   Reveal Solution Discussion Select an answer first
6. 20expert · medium

   A large university is planning to scale its ISE deployment to support 50,000 concurrent wireless users. They currently have four PSNs, each capable of handling 10,000 sessions. They want to add capacity to handle the peak load of 50,000 users, but they also want to maintain high availability so that if one PSN fails, the remaining PSNs can handle the load. Which approach best meets these requirements?

   • AAdd one more PSN, bringing the total to five, and configure a load balancer.
   • BAdd three more PSNs, bringing the total to seven, but do not use a load balancer.
   • CAdd two more PSNs, bringing the total to six, and configure a load balancer to distribute traffic evenly.
   • DUpgrade each PSN to handle 12,500 sessions, keeping four PSNs.
   Reveal Solution Discussion Select an answer first