Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Answer: C Cisco ISE split deployments divide the authentication, authorization, and accounting (AAA) workload between the primary and secondary nodes, optimizing the AAA workflow while allowing either node to handle the full AAA workload if connectivity fails. **Learn more:** [Cisco ISE 3.5 Installation Guide — Small network deployments](https://www.cisco.com/c/en/us/td/docs/security/ise/3-5/install_guide/b_ise_Installation_Guide_35/g_network_deployments_in_cisco_ise/c_small_network_deployments.html)

Answer: A, C During the interval before secondary PAN promotion, Cisco ISE continues to support existing or new Active Directory user RADIUS authentication and posture. Hotspot is excluded as a device-registration flow; Guest AUP is unavailable; and BYOD onboarding with the internal CA requires an active primary PAN. **Learn more:** [Cisco Identity Services Engine Administrator Guide, Release 3.5 — Deployment of Cisco ISE](https://www.cisco.com/c/en/us/td/docs/security/ise/3-5/admin_guide/b_ise_admin_3_5/b_ISE_admin_deployment.html)

Answer: A Cisco ISE achieves Policy Service Node redundancy by placing two or more PSNs in a node group. Group members detect peer failures and a surviving member can issue Change of Authorization requests to reset affected URL-redirected sessions, enabling clients to reconnect through an available PSN. [Cisco ISE Network Deployments documentation](https://www.cisco.com/c/en/us/td/docs/security/ise/3-5/install_guide/b_ise_Installation_Guide_35/g_network_deployments_in_cisco_ise/c_node_types_and_personas_in_distributed_deployments.html) **Learn more:** [Cisco ISE Network Deployments — Node types and personas in distributed deployments](https://www.cisco.com/c/en/us/td/docs/security/ise/3-5/install_guide/b_ise_Installation_Guide_35/g_network_deployments_in_cisco_ise/c_node_types_and_personas_in_distributed_deployments.html)