4.15 pxGrid Integration Between Security Devices Cisco WSA, Cisco ISE, and Cisco FMC CCIE-SECURITY Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company uses WSA and FMC. They want FMC to receive web reputation data from WSA to enhance threat correlation. The pxGrid connection is established, but FMC is not receiving any web reputation data. The administrator has confirmed that WSA is publishing to the web reputation topic. What is the most likely issue?

   • AWSA is not configured as a pxGrid subscriber.
   • BFMC is not subscribed to the web reputation topic.
   • CThe web reputation topic is not supported by FMC.
   • DFMC is not configured as a pxGrid broker.
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   An administrator is configuring pxGrid between ISE and FMC. They have enabled pxGrid on ISE and generated a certificate request on FMC. The administrator approves the certificate on ISE, but the pxGrid connection still fails. What is the next troubleshooting step?

   • AEnsure that FMC is configured as the pxGrid broker.
   • BVerify that the certificate is trusted by both devices.
   • CReboot both devices to apply the configuration.
   • DCheck if the pxGrid topic subscriptions are configured.
   Reveal Solution Discussion Select an answer first
4. 38application · medium

   A company has integrated ISE, WSA, and FMC via pxGrid. They want to enforce a policy that blocks web access for users whose endpoints have a known vulnerability detected by FMC. Which device should enforce this policy and what data does it need?

   • AISE should enforce the policy and needs to subscribe to web reputation from WSA.
   • BWSA should enforce the policy and needs to subscribe to threat events from FMC.
   • CFMC should enforce the policy and needs to subscribe to posture from ISE.
   • DWSA should enforce the policy and needs to subscribe to identity from ISE.
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A team has configured pxGrid between ISE and WSA. The connection is established, but WSA is not receiving any data. The administrator has verified that WSA is subscribed to the correct topics. What should they check next?

   • AReboot WSA to reset the pxGrid connection.
   • BVerify that ISE is publishing to the correct topic.
   • CEnsure that WSA is configured as a pxGrid broker.
   • DCheck the pxGrid logs on ISE to see if WSA is receiving messages.
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A security engineer is explaining pxGrid to a colleague. They need to describe the role of the broker in a multi-device deployment. Which statement accurately describes the broker's function?

   • AThe broker stores all shared data for historical analysis.
   • BThe broker enforces access control policies based on shared context.
   • CThe broker generates security events and publishes them to subscribers.
   • DThe broker manages topic subscriptions and routes messages between publishers and subscribers.
   Reveal Solution Discussion Select an answer first