300-715 Practice Exam and Study Guides - Verified By Lead2Passed Updated 153 Questions
2022 Updated Verified Pass 300-715 Study Guides & Best Courses
NEW QUESTION 91
What is a characteristic of the UDP protocol?
- A. UDP offers best-effort delivery.
- B. UDP can detect when a server is slow.
- C. UDP can detect when a server is down.
- D. UDP offers information about a non-existent server.
Answer: A
Explanation:
Section: Network Access Device Administration
Explanation/Reference:
NEW QUESTION 92
An engineer is configuring a dedicated SSID for onboarding devices. Which SSID type accomplishes this configuration?
- A. guest
- B. broadcast
- C. dual
- D. hidden
Answer: A
NEW QUESTION 93
A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10 minutes, it will be disconnected. Which task must be configured in order to meet this requirement?
- A. idle time
- B. set attribute as
- C. session timeout
- D. monitor
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_admin_accesspolicy_settings.html#reference_0E24B8FBFAB248219E1194435670347F
NEW QUESTION 94
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?
- A. Authentication is redirected to the external identity source.
- B. Authentication is redirected to the internal identity source.
- C. Authentication fails.
- D. Authentication is granted.
Answer: C
NEW QUESTION 95
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.
Answer:
Explanation:
https://www.mbne.net/tech-notes/aaa-tacacs-radius
NEW QUESTION 96
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
- A. Network Access Control
- B. Supplicant Provisioning Wizard
- C. My Devices Portal
- D. Application Visibility and Control
Answer: A
NEW QUESTION 97
What must match between Cisco ISE and the network access device to successfully authenticate endpoints?
- A. certificate
- B. SNMP version
- C. profile
- D. shared secret
Answer: D
Explanation:
Section: Endpoint Compliance
Explanation/Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html
NEW QUESTION 98
A company is attempting to improve their BYOD policies and restrict access based on certain criteri a. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?
- A. static group assignment
- B. IP address
- C. MAC address
- D. device registration status
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html#ID1353
NEW QUESTION 99
Which portal is used to customize the settings for a user to log in and download the compliance module?
- A. Client Profiling
- B. Client Endpoint
- C. Client Guest
- D. Client Provisioning
Answer: D
NEW QUESTION 100
Which scenario does not support Cisco ISE guest services?
- A. wired NAD with central WebAuth
- B. wired NAD with local WebAuth
- C. wireless LAN controller with central WebAuth
- D. wireless LAN controller with local WebAuth
Answer: B
NEW QUESTION 101
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.
Answer:
Explanation:
Explanation
Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.
This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide
NEW QUESTION 102
An organization is adding new profiling probes to the system to improve profiling on Oseo ISE The probes must support a common network management protocol to receive information about the endpoints and the ports to which they are connected What must be configured on the network device to accomplish this goal?
- A. ICMP
- B. WCCP
- C. ARP
- D. SNMP
Answer: D
Explanation:
https://community.cisco.com/t5/security-documents/ise-profiling-design-guide/ta-p/3739456#toc-hId-790343135
NEW QUESTION 103
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
- A. idle timeout
- B. session timeout
- C. termination-action
- D. radius-server timeout
Answer: A
Explanation:
Explanation
When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the inactivity timer expires, the switch removes the authenticated session. The inactivity timer for MAB can be statically configured on the switch port, or it can be dynamically assigned using the RADIUS Idle-Timeout attribute
NEW QUESTION 104
Which use case validates a change of authorization?
- A. Endpoints are created through device registration for the guests
- B. An authenticated, wired EAP-capable endpoint is discovered
- C. An endpoint profiling policy is changed for authorization policy.
- D. An endpoint that is disconnected from the network is discovered
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html
NEW QUESTION 105
When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen What is causing this issue?
- A. The groups are not added to Cisco ISE under the AD join point
- B. The groups are present but need to be manually typed as conditions
- C. Cisco ISE only sees the built-in groups, not user created ones
- D. Cisco ISE's connection to the AD join point is failing
Answer: A
Explanation:
Reference:
https://www.youtube.com/watch?v=0kuEZEo564s&ab_channel=CiscoISE-IdentityServicesEngine
NEW QUESTION 106
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?
- A. Configure the sponsor group to increase the number of logins.
- B. Create an Adaptive Network Control policy to increase the number of devices
- C. Modify the guest type to increase the number of maximum devices
- D. Use a custom portal to increase the number of logins
Answer: C
Explanation:
https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_01111.html.xml
NEW QUESTION 107
Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)
- A. The device queries the internal identity store
- B. The Cisco ISE server queries the internal identity store
- C. The device queries the Cisco ISE authorization server
- D. The device queries the external identity store
- E. The Cisco ISE server queries the external identity store.
Answer: A,E
NEW QUESTION 108
An administrator connects an HP printer to a dot1x enable port, but the printer in not accessible Which feature must the administrator enable to access the printer?
- A. change of authorization
- B. RADIUS authentication
- C. MAC authentication bypass
- D. TACACS authentication
Answer: C
Explanation:
https://community.cisco.com/t5/network-access-control/ise-for-printer-security/m-p/3933216
NEW QUESTION 109
Drag the descriptions on the left onto the components of 802.1X on the right.
Answer:
Explanation:
NEW QUESTION 110
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)
- A. Firepower
- B. Shell
- C. WLC
- D. IOS
- E. ASA
Answer: B,C
Explanation:
Section: Network Access Device Administration
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2--1/admin_guide/b_ise_admin_guide_21/ b_ise_admin_guide_20_chapter_0100010.html
NEW QUESTION 111
......
Understanding functional and technical aspects of Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Endpoint compliance
The following will be discussed in CISCO 300-715 dumps:
- Implement probes
- Implement profiler services
- Configure endpoint identity management
- Implement CoA
Ultimate Guide to the 300-715 - Latest Edition Available Now: https://www.lead2passed.com/Cisco/300-715-practice-exam-dumps.html
2022 Updated Verified Pass 300-715 Exam - Real Questions & Answers: https://drive.google.com/open?id=1i1sabZVbUt9ALLRRWN8DuqDlhTYThyTy
