CCIE Security
Domain 4Objective 1
4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 5)
Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
8concepts
25%of the exam
Questions 21–25
- 21
A company has a distributed ISE deployment with a primary PAN, a secondary PAN, and multiple PSNs. The administrator makes a change to a network access policy on the primary PAN. The change is successfully saved, but the secondary PAN does not show the change. The primary PAN shows no synchronization errors. What is the most likely cause?
Select an answer first - 22
A service provider is deploying ISE to support multiple customers. They have a hierarchical deployment with a master PAN and two tenant PANs. Each tenant has its own PSNs. They want to ensure that if a tenant's primary PSN fails, the tenant's secondary PSN takes over without affecting other tenants. Which configuration is required?
Select an answer first - 23
A large enterprise is planning to deploy Cisco ISE in a distributed model. They want to ensure that the deployment is highly available and that administrative tasks can be performed even if one node fails. Which of the following personas should be deployed on at least two nodes? (Select all that apply.)
Select an answer first - 24
A multinational corporation is deploying ISE across three regions: Americas, Europe, and Asia. They want to have a single global policy set, but they also want to allow regional administrators to manage their own policies. Which deployment model should they use?
Select an answer first - 25
A global company is deploying Cisco ISE across two data centers for redundancy. They want a single administrative interface and automatic failover for policy administration. Which deployment model and node configuration should they use?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.