Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 262

An administrator must enable helpdesk users to view users' information on wireless LAN controllers in a Cisco ISE environment. The solution must meet these requirements:

• Authenticate the helpdesk users against the local ISE database.
• Allow the helpdesk users to access the Monitor tab tor the WLC.

These configurations were performed:

• added a wireless LAN controller
• configured user accounts
• enabled Device Admin Service in Cisco ISE
• configured a TACACS profile
• configured a policy set
• configured an authentication policy
• configured an authorization policy

Which two actions must be taken in Cisco ISE? (Choose two.)

Answer options

• A. Configure an authentication profile
• B. Assign the Monitor role in the TACACS profile
• C. Configure an identity group.
• D. Assign the Wireless role in the TACACS profile
• E. Configure TACACS command sets.

Correct answer: B, C

Explanation

To enable helpdesk users to view the necessary information, it is essential to assign them the Monitor role in the TACACS profile, which permits access to monitoring functions. Additionally, creating an identity group is necessary to organize users and apply appropriate policies, making it easier to manage access rights.