4.15 pxGrid Integration Between Security Devices Cisco WSA, Cisco ISE, and Cisco FMC CCIE-SECURITY Practice Questions (Page 10)

Questions 46–50

1. 46application · medium

   A company wants to enhance visibility by having Cisco FMC receive web traffic metadata from Cisco WSA. They have already enabled pxGrid on both devices. What is the next step to ensure FMC receives this data?

   • AOn FMC, configure a syslog export to send data to WSA.
   • BOn FMC, subscribe to the web reputation topic published by WSA.
   • COn WSA, subscribe to the threat events topic published by FMC.
   • DOn WSA, configure a proxy rule to forward traffic to FMC.
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   An administrator is setting up a new pxGrid integration between Cisco ISE and Cisco FMC. ISE is already running as the pxGrid broker. What is the first step the administrator should perform on FMC to establish the pxGrid connection?

   • AEnable the pxGrid service on FMC and generate a certificate request.
   • BSubscribe to all available pxGrid topics on FMC.
   • CConfigure FMC as a pxGrid broker.
   • DCreate a new user account on ISE for FMC.
   Reveal Solution Discussion Select an answer first
4. 48application · medium · select all that apply

   A security team is planning to use pxGrid to share context between Cisco WSA, ISE, and FMC. They want to ensure that each device receives the information it needs. Which of the following topic subscriptions are appropriate for this integration? (Select all that apply.)

   • AISE subscribes to the web usage topic from WSA.
   • BISE subscribes to the threat events topic from FMC.
   • CFMC subscribes to the web reputation topic from WSA.
   • DWSA subscribes to the threat events topic from FMC.
   • EWSA subscribes to the endpoint posture topic from ISE.
   Check answers Discussion Select an answer first
5. 49application · medium

   A company has integrated Cisco ISE, WSA, and FMC via pxGrid. They want to implement a policy that requires users to re-authenticate when FMC detects a high-severity threat on their endpoint. Which device should enforce this policy and what information does it need?

   • AWSA should enforce the policy and needs to subscribe to threat events from FMC.
   • BISE should enforce the policy and needs to publish threat events to FMC.
   • CFMC should enforce the policy and needs to subscribe to posture from ISE.
   • DISE should enforce the policy and needs to subscribe to threat events from FMC.
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   An administrator has configured pxGrid between Cisco ISE and Cisco WSA. WSA is not receiving any posture updates from ISE. The pxGrid connection shows as 'Connected' on both devices. What is the most likely cause of this issue?

   • AWSA is not configured as a pxGrid publisher.
   • BISE is not configured as the pxGrid broker.
   • CWSA is not subscribed to the correct pxGrid topic.
   • DThe ISE certificate has expired.
   Reveal Solution Discussion Select an answer first