4.15 pxGrid Integration Between Security Devices Cisco WSA, Cisco ISE, and Cisco FMC CCIE-SECURITY Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   An organization uses Cisco ISE for network access control and Cisco FMC for next-generation firewall management. They want to automatically quarantine an endpoint when FMC detects a high-severity threat event. The security team wants to leverage pxGrid to achieve this. What is the correct integration approach?

   • AFMC sends syslog to ISE, and ISE parses the syslog to trigger quarantine.
   • BFMC publishes threat events to pxGrid, and ISE subscribes to the threat event topic and triggers a quarantine policy.
   • CBoth ISE and FMC publish threat events, and a third-party orchestrator handles quarantine.
   • DISE publishes threat events to pxGrid, and FMC subscribes and blocks the endpoint.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to enhance visibility by correlating web traffic metadata with threat detections. They have Cisco WSA and Cisco FMC. The goal is to allow FMC to see web reputation data from WSA and use it in intrusion prevention decisions. What should be configured?

   • AEnable pxGrid on both devices and have FMC subscribe to the web reputation topic published by WSA.
   • BSet up a syslog server to forward WSA logs to FMC.
   • CUse FMC's built-in web reputation feed without involving WSA.
   • DConfigure WSA to send NetFlow to FMC for web reputation analysis.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A network administrator is setting up pxGrid between Cisco ISE and Cisco FMC for the first time. The administrator has enabled pxGrid on ISE and generated a certificate. What is the next step to establish the connection?

   • AEnable pxGrid on FMC and then wait for ISE to discover it automatically.
   • BOn ISE, add FMC as a subscriber and upload the FMC certificate.
   • CConfigure FMC to use RADIUS for authentication with ISE.
   • DOn FMC, add ISE as a pxGrid controller and upload the ISE certificate.
   Reveal Solution Discussion Select an answer first
5. 29application · medium · select all that apply

   A security engineer is planning pxGrid integrations among Cisco ISE, WSA, and FMC. The engineer needs to identify which topics are relevant for each integration. Select all that apply.

   • ANetwork topology topic - used by WSA to discover all network devices.
   • BWeb reputation topic - used by FMC to enhance IPS decisions.
   • CEndpoint identity topic - used by WSA to map IP addresses to usernames.
   • DDevice posture topic - used by FMC to enforce firewall rules based on posture.
   • EThreat events topic - used by ISE to trigger quarantine actions.
   Check answers Discussion Select an answer first
6. 30application · medium

   A company uses Cisco ISE, WSA, and FMC. They want to implement adaptive authentication: when a user's device is non-compliant, the user should be prompted for multi-factor authentication (MFA) before accessing the internet. Which pxGrid integration enables this?

   • AFMC shares threat intelligence with ISE, and ISE triggers MFA for all users.
   • BWSA publishes web usage data to FMC, and FMC blocks non-compliant users.
   • CISE shares posture status with WSA via pxGrid, and WSA redirects non-compliant users to an MFA portal.
   • DISE sends syslog to WSA with posture status, and WSA uses a static ACL to block non-compliant users.
   Reveal Solution Discussion Select an answer first