What is a downloadable ACL (dACL) in the context of ISE?

An ACL that is stored locally on the switch and applied to all users

An ACL that is used to block all traffic

An ACL that is pushed from ISE to the switch/WLC to enforce per-user access policies

An ACL that is used to filter routing updates

What is flexible authentication ordering on a Cisco switch?

The ability to use multiple RADIUS servers for redundancy

The ability to change the VLAN after authentication

The ability to use both RADIUS and TACACS+ for authentication

The ability to configure the order in which authentication methods (e.g., 802.1X, MAB, CWA) are attempted on a port

What is the purpose of RADIUS accounting on a switch or WLC?

To authorize users for network access

To send session start/stop and interim update messages to ISE for monitoring and reporting

Which command on a Cisco switch enables RADIUS accounting for network access?

aaa accounting network default start-stop group radius

aaa authentication dot1x default group radius

CCIE Security

Domain 4Objective 2

4.2 Cisco Switches and Cisco Wireless LAN Controllers for Network Access AAA with Cisco ISE CCIE-SECURITY Practice Questions (Page 2)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

25%of the exam

Questions 6–10

6foundation · easy
Which protocol is used to redirect a client to the CWA portal?
Select an answer first
7foundation · easy
What is a downloadable ACL (dACL) in the context of ISE?
Select an answer first
8foundation · easy
What is flexible authentication ordering on a Cisco switch?
Select an answer first
9foundation · easy
What is the purpose of RADIUS accounting on a switch or WLC?
Select an answer first
10foundation · easy
Which command on a Cisco switch enables RADIUS accounting for network access?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.