An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes. Which two persona configurations allow the engineer to successfully test redundancy of a failed node? (Choose two.)
A.
Configure one of the Cisco ISE nodes as the Health Check node.
B.
Configure both nodes with the PAN and MnT personas only.
C.
Configure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary.
D.
Configure both nodes with the PAN, MnT, and PSN personas.
E.
Configure one of the Cisco ISE nodes as the primary PAN and PSN personas and the other as the secondary.
Another no brain question, this question is not clear at all, which type of redundancy wants to test the engineer? Unfortunally here we need to suppose the correct answer.
if the engineer want to test redundancy between PAN node, then health check node for automatic failover is required, if automatic failover is not enabled you need to move to primary manually, entering on the Secondary Admin node gui.... So it really depends on how the """"engineer"""" wants to perform these test.
If the engineer desire to test redundancy of PSN then he needs to configure NAD with primary and secondary radius server.
If the engineer wants to test redundancy in general, so could be A&D or C&D
I refuse to answer this nonsensical question.
EXACLY!!! This questions are cringe... What this guy is trying to do??? As you said you can do many tests and try different type of persona redundancy... The exams are the worst thing that Cisco has...
C & D.
He just want to test redundancy so run a two-node deployment (all personas on both).
and they do not say anything about auto-failover, so keep it simple.
For me the most logical answers here are C and D.
The first one is about configuring the primary and the secondary role for the MnT persona and the PAN persona
The D answer is about what type of persona we are configuring, if you want to have redundacy you must configure the persona listed here so psn/pan and monitoring.
No actually is tricky, Basically the other are not right because one of the answers is saying having a primary PSN (a primary does not exist), the A answer is saying to configure one of the node as the health check node, but you need a node that is not a PAN node for this purpose.
So the answer is DC becuase the logic here is to first saying okay im configuring both nodes as PSN/PAN/MnT node, after that the C answer is saying fine after that I have configured the personas I will just elect the primary PAN and the primary MnT node.
In a logical way first you declere the Primary PAN node and then you do the cluster, anyway this is why CD are the only one right here
I hope that I have "cleared the field for ya"
The Health Check persona is not required for redundancy testing. The PAN and MnT personas are required for redundancy testing, as they are responsible for authentication and authorization, respectively. The PSN persona is not required for redundancy testing, as it is responsible for policy enforcement.
Here are the details of each configuration:
Configure both nodes with the PAN and MnT personas only. This configuration will allow the engineer to test redundancy by failing over from one node to the other. When one node fails, the other node will take over and continue to provide authentication and authorization services.
Configure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary. This configuration will allow the engineer to test redundancy by manually failing over from one node to the other. The engineer can do this by disabling the primary node and then enabling the secondary node. When the primary node is disabled, the secondary node will take over and continue to provide authentication and authorization services.
The two persona configurations that allow the engineer to successfully test redundancy of a failed node in a Cisco ISE deployment with two nodes are:
C. Configure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary.
D. Configure both nodes with the PAN, MnT, and PSN personas.
Explanation:
Option C: By configuring one node as the primary PAN and MnT and the other as the secondary, the secondary node will automatically take over as the primary node if the primary node fails. This configuration ensures redundancy for the PAN and MnT functions.
Option D: By configuring both nodes with the PAN, MnT, and PSN personas, each node can act as a Policy Service Node (PSN) and can perform policy enforcement for network access requests. This configuration ensures redundancy for the PSN function.
Options A, B, and E are incorrect because:
Option A: Configuring one node as the Health Check node is not related to redundancy testing. The Health Check node is used to monitor the overall health of the deployment and to detect failures.
Option B: Configuring both nodes with only the PAN and MnT personas would not provide redundancy for the PSN function.
Option E: Configuring one node as the primary PAN and PSN and the other as the secondary would not provide redundancy for the MnT function.
but C deployment do not ensures redundancy for PSN...
upvoted 1 times
...
...
...
...
This section is not available anymore. Please use the main Exam Page.300-715 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
ElCobra90
Highly Voted 1 year, 3 months agoLeogxn
1 year, 3 months agoXBfoundX
1 year agoCachaman
Most Recent 1 month, 2 weeks agoNullNull88
8 months agoZappBrannigan
10 months, 3 weeks agoXBfoundX
1 year agoleostor
12 months agoXBfoundX
11 months, 2 weeks agoLeogxn
1 year, 3 months agodenverfly
1 year, 5 months agoJimboOh
1 year, 7 months agoJimboOh
1 year, 7 months agoJimboOh
1 year, 7 months agoJimboOh
1 year, 7 months agoJimboOh
1 year, 7 months agoleostor
12 months ago