We're so confident of our products that we provide no hassle product exchange.
Cisco 500-254 Exam Overview:
| Certification Vendor: | Cisco |
|---|---|
| Exam Name: | Implementing and Configuring Cisco Identity Services Engine (SISE) |
| Exam Number: | 500-254 |
| Certificate Validity Period: | 3 years |
| Passing Score: | Approx 70-80% (scaled score, not officially disclosed) |
| Exam Price: | USD $200-$300 (varies by region) |
| Exam Format: | Multiple Choice Multiple Answer, Simulations, Drag and Drop, Multiple Choice Single Answer |
| Exam Duration: | 90 minutes |
| Real Exam Qty: | 48-65 |
| Related Certifications: | CCIE Security CCNP Security |
| Available Languages: | English |
| Recommended Training: | Cisco Learning Network Implementing and Configuring Cisco Identity Services Engine (SISE) Course |
| Exam Registration: | Pearson VUE Registration Cisco Certification Portal |
| Sample Questions: | Cisco 500-254 Sample Questions |
| Exam Way: | Online proctored or onsite at Pearson VUE authorized test centers |
| Pre Condition: | No formal prerequisites; recommended knowledge of networking, 802.1X, and Cisco security concepts |
| Official Syllabus URL: | https://www.cisco.com/c/en/us/training-events/training-certifications/exams/sise.html |
Cisco 500-254 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Operations and Troubleshooting | 6% | - Monitoring and reporting - Common issues and resolution - High availability and recovery - Logging and diagnostics |
| Topic 2: Guest Services and BYOD | 10% | - Self-service portals - Guest portals and sponsor access - MDM integration - BYOD onboarding and provisioning |
| Topic 3: Profiling and Posture Assessment | 15% | - Endpoint profiling rules - Profiling probes and feed services - Agent and agentless posture - Posture service and compliance |
| Topic 4: Identity Stores and Authentication Protocols | 15% | - RADIUS and TACACS+ configuration - EAP protocols and TEAP - Internal and external identity stores - Certificate management |
| Topic 5: Architecture and Deployment | 20% | - ISE architecture and personas - Licensing and software upgrades - Installation and initial setup - Deployment models and sizing |
| Topic 6: Policy Enforcement and Access Control | 34% | - 802.1X authentication - Change of Authorization (CoA) - Authorization and policy rules - MAC Authentication Bypass (MAB) - Web Authentication |
Cisco Implementing and Configuring Cisco Identity Service Engine - SISE Sample Questions:
Question 1
How are access control lists implemented on a Cisco WLC in a Cisco ISE authorization policy?
A. Named access lists are pushed down to the WL
B. Named access lists are configured in Cisco ISE.
C. Named access lists are configured on the WLC.
D. Dynamic access lists are configured in Cisco ISE.
Question 2
Which two elements must you configure on a Cisco Wireless LAN Controller to allow Cisco ISE to authenticate wireless users? (Choose two.)
A. Configure Cisco ISE as a RADIUS accounting server and enter a shared secret.
B. Configure all attached LWAPs to use the configured Cisco ISE node.
C. Configure Cisco ISE as a RADIUS authentication server and enter a shared secret.
D. Configure each WLAN to use the configured Cisco ISE node.
E. Configure the Cisco Wireless LAN Controller to join a Microsoft Active Directory domain.
F. Configure RADIUS attributes for each SSI
Question 3
Which option represents the default action or actions that ISE 1.x 1.0 takes when the endpoint usage count exceeds licensed endpoint values?
A. block all traffic, and generate alarms
B. do not block traffic, and generate an INFO, WARNING, or CRITICAL alarm
C. block all traffic
D. do not take any action
Question 4
Which three conditions can be used for posture checking? (Choose three.)
A. file
B. operating system
C. certificate
D. service
E. application
Question 5
Refer to the exhibit.
Which two statements are true about identity groups and their use in an authorization policy? (Choose two.)
A. Only user identity groups can be created in Cisco ISE.
B. Identity groups can only reference internal endpoints and users in the local database.
C. User identity groups can reference internal and external stores.
D. The Whitelist identity group that is shown in the exhibit can be used to contain MAC addresses that are statically entered into Cisco ISE.
E. The Whitelist identity group is one of the predefined identity groups in Cisco ISE.
Solutions:
| Question 1 Answer: C | Question 2 Answer: C,D | Question 3 Answer: B | Question 4 Answer: A,D,E | Question 5 Answer: C,D |
By Oliver
