A service provider wants to offer ISE as a managed service to multiple tenants. Each tenant should have its own administrative domain and policy set, but they want to share the same physical infrastructure. Which deployment model should they use?

A deployment with a single PAN and multiple PSNs

A growing enterprise is deploying Cisco ISE to support 50,000 endpoints and needs to ensure that if the primary Policy Administration Node (PAN) fails, administrative changes can still be made. They also want to distribute authentication load. Which deployment model and node roles should they implement?

Distributed deployment with a single PAN, multiple PSNs, and no MNT nodes

Distributed deployment with a primary and secondary PAN, multiple PSNs, and primary/secondary MNT nodes

Hierarchical deployment with a primary PAN and a secondary PAN in a different region, but only one PSN

Standalone deployment with a single PAN, PSN, and MNT on one node

A company is planning to deploy ISE and wants to ensure that all authentication logs are stored centrally for compliance. Which node persona should be responsible for collecting and storing these logs?

Monitoring and Troubleshooting Node (MNT)

Policy Administration Node (PAN)

A large enterprise has a distributed ISE deployment with a primary and secondary PAN. The primary PAN fails, and the secondary PAN takes over. However, after the primary PAN is repaired and brought back online, the secondary PAN remains active. What is the likely reason?

The secondary PAN is configured to stay active after failover

The primary PAN is not reachable from the network

The MNT node is blocking the primary PAN from becoming active

The primary PAN is not synchronized with the secondary PAN

CCIE Security

Domain 4Objective 1

4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 7)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

8concepts

25%of the exam

Questions 31–35

31application · medium
A large enterprise has a distributed ISE deployment with multiple PSNs, a PAN, and an MNT node. The security team wants to view real-time authentication logs and generate reports from a single interface. Which node should they access?
Select an answer first
32application · medium
A service provider wants to offer ISE as a managed service to multiple tenants. Each tenant should have its own administrative domain and policy set, but they want to share the same physical infrastructure. Which deployment model should they use?
Select an answer first
33application · medium
A growing enterprise is deploying Cisco ISE to support 50,000 endpoints and needs to ensure that if the primary Policy Administration Node (PAN) fails, administrative changes can still be made. They also want to distribute authentication load. Which deployment model and node roles should they implement?
Select an answer first
34application · easy
A company is planning to deploy ISE and wants to ensure that all authentication logs are stored centrally for compliance. Which node persona should be responsible for collecting and storing these logs?
Select an answer first
35expert · hard
A large enterprise has a distributed ISE deployment with a primary and secondary PAN. The primary PAN fails, and the secondary PAN takes over. However, after the primary PAN is repaired and brought back online, the secondary PAN remains active. What is the likely reason?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 7)

Questions 31–35

A large enterprise has a distributed ISE deployment with multiple PSNs, a PAN, and an MNT node. The security team wants to view real-time authentication logs and generate reports from a single interface. Which node should they access?

A service provider wants to offer ISE as a managed service to multiple tenants. Each tenant should have its own administrative domain and policy set, but they want to share the same physical infrastructure. Which deployment model should they use?

A company is planning to deploy ISE and wants to ensure that all authentication logs are stored centrally for compliance. Which node persona should be responsible for collecting and storing these logs?

A large enterprise has a distributed ISE deployment with a primary and secondary PAN. The primary PAN fails, and the secondary PAN takes over. However, after the primary PAN is repaired and brought back online, the secondary PAN remains active. What is the likely reason?

Keep studying — 4.0 Identity Management, Information Exchange, and Access Control