[Free] 2017(Oct) EnsurePass Braindumps Cisco 500-254 Dumps with VCE and PDF 21-30

EnsurePass
2017 Oct Cisco Official New Released 500-254
100% Free Download! 100% Pass Guaranteed!
http://www.EnsurePass.com/500-254.html

Implementing and Configuring Cisco Identity Services Engine (SISE)

Question No: 21

Which two dictionary groups does Cisco ISE provide? (Choose two.)

  1. system-defined

  2. RADIUS vendor

  3. RADIUS IETF

  4. user-defined

  5. LDAP

  6. Active Directory

Answer: A,D

Question No: 22

What is the limit of groups that Cisco ISE can retrieve from an Active Directory?

  1. 10

  2. 50 C. 100 D. 150 E. 200

Answer: C

Question No: 23

Which global command is used to activate 802.1X on a switch?

  1. dot1x enable

  2. dot1x system-auth-control

  3. dot1x service start

  4. dot1x switchport enable

Answer: B

Question No: 24

Which two commands are needed to configure 802.1X open mode? (Choose two.)

  1. authentication event

  2. authentication host-mode multi-auth

  3. authentication host-mode single domain

  4. authentication open

Answer: B,D

Question No: 25

Which statement is true about 802.1X closed mode?

  1. It is the default configuration of an 802.1X-enabled switch port.

  2. Only EAPOL traffic is allowed until the authentication process is finished.

  3. DNS and DHCP are allowed before authentication.

  4. Cisco Discovery Protocol is allowed before authentication.

  5. Only EAPOL and Cisco Discovery Protocol are allowed until the authentication process completes.

Answer: D

Question No: 26

The 802.1X protocol supports which two port types? (Choose two.)

  1. Layer 2 access port

  2. trunk port

  3. dynamic port

  4. Layer 3 access port

  5. EtherChannel port

Answer: A,D

Question No: 27

What is the default period for Cisco ISE to automatically purge expired guest accounts?

  1. immediately after expiration

  2. 1 day

  3. 7 days

  4. 15 days

  5. 30 days

Answer: D

Question No: 28

What is the recommended time zone for Cisco ISE installations?

  1. customer local time zone

  2. customer headquarters time zone

  3. Pacific time

  4. Coordinated Universal Time

Answer: D

Question No: 29

Which two EAP authentication methods require only a server certificate? (Choose two.)

  1. EAP-TLS

  2. EAP-FAST

  3. EAP-GTC

  4. EAP-MD5

  5. PEAP-MS-CHAPv2

Answer: C,E

Question No: 30

Which three encryption policies does MACsec support? (Choose three.)

  1. always-secure

  2. must-secure

  3. should-secure

  4. never-secure

  5. must-not-secure

Answer: B,C,E

100% Free Download!
Download Free Demo:500-254 Demo PDF
100% Pass Guaranteed!
Download 2017 EnsurePass 500-254 Full Exam PDF and VCE

EnsurePass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 EnsurePass IT Certification PDF and VCE

HOT EXAM!

You must be logged in to post a comment.

Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com