4.14 Identity Mapping on Cisco ASA, Cisco ISE, Cisco WSA, and Cisco FTD CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   On Cisco ASA, what is the first step to enable identity mapping with Active Directory?

   • AConfigure an AAA server group for LDAP or RADIUS.
   • BEnable the identity firewall feature globally.
   • CCreate a local user database on the ASA.
   • DDefine an access-list that matches user names.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which feature on Cisco ASA allows you to apply access rules based on the user's identity?

   • AIdentity firewall
   • BBotnet traffic filter
   • CThreat detection
   • DMPF (Modular Policy Framework)
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   How does Cisco ISE provide identity mapping to network devices?

   • ABy using SNMP to send user information to network devices.
   • BBy requiring each network device to independently query Active Directory.
   • CBy embedding user credentials in all network traffic.
   • DBy acting as a central policy engine that pushes identity information to devices via pxGrid or RADIUS.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the role of Cisco ISE in identity mapping for policy enforcement?

   • AIt stores all user passwords in clear text.
   • BIt replaces the firewall's access control lists.
   • CIt encrypts all user traffic on the network.
   • DIt authenticates users and provides identity context to network devices.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   How does Cisco WSA use identity mapping for web filtering?

   • AIt blocks all web traffic from unknown users.
   • BIt maps user identities to IP addresses to apply user-specific web policies.
   • CIt uses the source MAC address to identify users.
   • DIt requires users to authenticate to the WSA every time they browse.
   Reveal Solution Discussion Select an answer first