Exam 300-715 topic 1 question 312 discussion

An administrator must configure Cisco ISE to authenticate the administrative superuser to manage a Cisco Adaptive Security Appliance firewall. The solution must meet the requirements:

• The user must be authenticated against Microsoft AD.
• The user must have full management administrative access to the Cisco Adaptive Security Appliance firewall.
• The user must not use the enable command.

The configurations were performed:

• joined Cisco ISE to AD and retrieved AD groups
• added the Cisco Adaptive Security Appliance firewall
• enabled Device Admin Service in Cisco ISE
• configured TACACS command sets
• configured a TACACS profile
• configured an authorization policy
• configured the Cisco Adaptive Security Appliance firewall for authentication and authorization

Which two actions must be performed in Cisco ISE? (Choose two.)