A. All passwords must be encrypted in the configuration file Cisco ISE requires that all passwords in the ZTP configuration file (ise-ztp.img) be encrypted for security. Plaintext passwords are not allowed to protect sensitive information.
D. ZTP is only supported on virtual appliances (Most Voted) ZTP in Cisco ISE is designed for virtual appliances, such as those deployed in VMware, AWS, Azure, and OCI Cloud. It is not available for physical ISE appliances.
E) is correct for sure: "Linux is required to create the configuration image".
Second answer must be B) - ICMP have to be allowed.
ICMP, DNS and NTP are setup checks, which can be disabled in ZTP (question doesn't mention it, so it will be enabled by default)
# Skipping specific checks
SkipIcmpChecks=true
SkipDnsChecks=true
SkipNtpChecks=true
https://community.cisco.com/t5/security-knowledge-base/ise-zero-touch-provisioning-ztp/ta-p/4541606
E) - Linux needed:
"Creating the ISE Zero Touch Provisioning (ZTP) Image File --> This requires Access to a Linux system with sudo or root permissions. "
https://community.cisco.com/t5/security-knowledge-base/ise-zero-touch-provisioning-ztp/ta-p/4541606
---
INCORRECT for sure:
A) - All passwords must be encrypted...
"Only Plain password type is supported in the configuration file. Encrypted/hashed password in the key-value pair file for the ‘admin’ account is not supported." (community link above)
"As a security measure, since the ZTP configuration is PLAIN TEXT and contains the ISE Administrator level password, when using ZTP on ISE 3.2 and newer, you will be required to change your password the first time you log in to the Web Interface (GUI)."
https://www.cisco.com/c/en/us/td/docs/security/ise/3-2/install_guide/b_ise_installationGuide32/b_ise_InstallationGuide32_chapter_4.html#first-login-password-change
---
C) – ZTP is supported on many virtualization platforms (community link above)
D) – ZTP is supported on physical SNS appliances as well (community link above)
The first process is the ZTP Configuration Image. This requires Access to a Linux system with sudo or root permissions. First we have to create the configuration file that will autocomplete the setup script for us.
https://community.cisco.com/t5/security-knowledge-base/ise-zero-touch-provisioning-ztp/ta-p/4541606
For me D and E
In the link you have provided is stated that physical appliances (SNS) are also supported, so D is not dorrect.
"Which process you choose can depend on a few factors:
SNS Appliance or VM Platform
Version of VMWare vCenter installed
Access to Linux (RHEL, CentOS, or Ubuntu) system with root access"
It is D & E.
Linux is required as the conf file for ZTP is a linux shell script file.
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.300-715 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
AhcMez
1 month agoJimmyb007
3 months, 3 weeks agoNikoTomas
10 months, 1 week agoNikoTomas
10 months, 1 week agoHercJ
11 months, 2 weeks agoXBfoundX
1 year agoJor466077
1 year, 1 month agoIETF1
1 year, 1 month agoNikoTomas
10 months, 1 week agothol119
1 year, 2 months ago