Exam 300-715 topic 1 question 67 discussion

Actual exam question from Cisco's 300-715

Question #: 67
Topic #: 1

An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy.
Which two components must be configured, in addition to Active Directory groups, to achieve this goal? (Choose two.)

A. Identity Source Sequences
B. LDAP External Identity Sources
C. Active Directory External Identity Sources
D. Library Condition for Identity Group: User Identity Group
E. Library Condition for External Identity: External Groups

Show Suggested Answer

Suggested Answer: CE 🗳️

by Russ at Dec. 7, 2022, 9:47 a.m.

Comments

Submit Cancel

denverfly

1 year, 1 month ago

Selected Answer: CE

The correct answers are: Active Directory External Identity Sources Library Condition for External Identity: External Groups To achieve the goal of configuring Active Directory to then use information from Active Directory in an authorization policy, the following components must be configured: Active Directory External Identity Sources: This component allows Cisco ISE to authenticate users against an Active Directory domain. Library Condition for External Identity: External Groups: This component allows Cisco ISE to use groups from an external identity source, such as Active Directory, to make authorization decisions. The other options are incorrect

upvoted 2 times

...

THEODORABLE

1 year, 2 months ago

Selected Answer: CE

C & E are components in addition to AD group import

upvoted 1 times

...

IlPerdan0

1 year, 7 months ago

Selected Answer: CE

We don't need to set ID source sequence because the question only asks for AD for authorization. So it should be the AD External ID Source and Library Condition.

upvoted 3 times

ElCobra90

1 year ago

Tricky question but you are right, the identity source sequence is configured on the authentication phase, not in the authorization , imho the only CORRECT 100% answer is E

upvoted 2 times

...

Russ

1 year, 7 months ago

Surely C and E? You don't need to configure an identity store sequence to use AD

upvoted 4 times

...