4.1 Cisco ISE Scalability Using Multiple Nodes and Personas CCIE-SECURITY Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   An organization has four PSNs behind a load balancer. During a peak period, one PSN becomes overloaded and starts dropping authentication requests. The load balancer continues to send traffic to it. What is the most effective solution?

   • AIncrease the RADIUS timeout on the load balancer
   • BConfigure the load balancer to perform health checks and remove the PSN from the pool when it fails to respond
   • CEnable PAN failover to handle authentication
   • DAdd more PSNs to the deployment
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A security administrator is troubleshooting why a newly added PSN is not enforcing the latest security policies. The PSN is reachable from the PAN and shows as 'Registered' in the admin console. What should the administrator check next?

   • AVerify that the PSN has completed the initial synchronization with the PAN
   • BReboot the PSN to force a configuration reload
   • CEnsure the PSN is configured as a PAN
   • DCheck the MNT node's log collection status
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A service provider is planning to scale its ISE deployment to support 200,000 concurrent authentications. They currently have a distributed deployment with 10 PSNs. They are considering adding more PSNs. What is the most important factor to consider?

   • AThe number of PSNs must be an even number for load balancing
   • BThe MNT nodes must be upgraded to store more logs
   • CThe PAN must be upgraded to handle the increased configuration load
   • DThe network infrastructure must support the additional RADIUS traffic and load balancing
   Reveal Solution Discussion Select an answer first
5. 39expert · hard · select all that apply

   A company is deploying ISE and wants to use a single node to perform multiple roles to reduce hardware costs. Which of the following personas can be combined on a single ISE node? (Select all that apply.)

   • APAN and PSN
   • BPAN and MNT
   • CPAN, PSN, and MNT all on one node
   • DPSN and MNT
   • EpxGrid and PAN
   Check answers Discussion Select an answer first
6. 40expert · hard

   A company has a distributed ISE deployment with a primary and secondary PAN. The primary PAN is scheduled for maintenance. The administrator wants to ensure that administrative changes can still be made during the maintenance window. What should the administrator do?

   • AManually promote the secondary PAN to primary before the maintenance
   • BShut down the secondary PAN to force the primary to stay active
   • CConfigure the MNT node to act as a PAN during the maintenance
   • DDo nothing; the secondary PAN will automatically take over
   Reveal Solution Discussion Select an answer first