4.14 Identity Mapping on Cisco ASA, Cisco ISE, Cisco WSA, and Cisco FTD CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of identity mapping in network security devices?

   • ATo automatically assign IP addresses to users based on their identity
   • BTo provide a backup authentication method when RADIUS fails
   • CTo encrypt all traffic between users and network devices
   • DTo replace traditional IP-based access control lists with user-based policies
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which management interface is used to configure identity mapping on Cisco FTD?

   • ACommand-line interface (CLI) directly on the FTD device
   • BASDM (Adaptive Security Device Manager)
   • CFirepower Management Center (FMC)
   • DCisco Prime Infrastructure
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does identity mapping on Cisco ASA differ from that on Cisco FTD?

   • AASA requires Cisco ISE, while FTD does not.
   • BFTD can only use local users, while ASA integrates with AD.
   • CASA uses pxGrid, while FTD uses RADIUS only.
   • DASA uses a local identity firewall feature, while FTD uses external identity sources configured via FMC.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement accurately compares identity mapping between Cisco ISE and Cisco WSA?

   • ABoth are primarily used for email security.
   • BThey are interchangeable and can be used for the same purpose.
   • CISE provides identity to network devices, while WSA uses identity for web filtering.
   • DISE uses web filtering policies, while WSA uses RADIUS authentication.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which statement best describes how identity mapping works across network security devices?

   • AIt correlates user authentication information with network traffic flows to apply user-based policies.
   • BIt only works with local user accounts on the security device.
   • CIt requires all users to authenticate to each network device individually.
   • DIt uses MAC addresses to identify users on the network.
   Reveal Solution Discussion Select an answer first