Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 174

An engineer is testing low-impact mode for a phased deployment of Cisco ISE. Which type of traffic is denied when a host tries to connect to the network prior to authentication?

Answer options

• A. DNS
• B. EAP
• C. DHCP
• D. HTTP

Correct answer: D

Explanation

In low-impact mode for Cisco ISE, HTTP traffic is denied for unauthenticated hosts to protect the network from potential threats. DNS, EAP, and DHCP traffic are typically allowed in this mode to facilitate necessary communications and device discovery before authentication takes place.