The Improved Guide To 300-715 Vce

NEW QUESTION 1
What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

• A. The secondary node restarts.
• B. The primary node restarts.
• C. Both nodes restart.
• D. The primary node becomes standalone.

Answer: C

NEW QUESTION 2
Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

• A. MAB and if user not found, continue
• B. MAB and if authentication failed, continue
• C. Dot1x and if authentication failed, continue
• D. Dot1x and if user not found, continue

Answer: A

NEW QUESTION 3
Which two probes must be enabled for the ARP cache to function in the Cisco ISE profiling service so that a user can reliably bind the IP addresses and MAC addresses of endpoints? (Choose two.)

• A. SNMP
• B. HTTP
• C. RADIUS
• D. DHCP
• E. NetFlow

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

NEW QUESTION 4
What is a characteristic of the UDP protocol?

• A. UDP can detect when a server is down.
• B. UDP can detect when a server is slow.
• C. UDP offers best-effort delivery.
• D. UDP offers information about a non-existent server.

Answer: C

NEW QUESTION 5
Which portal is used to customize the settings for a user to log in and download the compliance module?

• A. Client Provisioning
• B. Client Endpoint
• C. Client Profiling
• D. Client Guest

Answer: A

NEW QUESTION 6
Which two endpoint compliance statuses are possible? (Choose two.)

• A. compliant
• B. valid
• C. unknown
• D. known
• E. invalid

Answer: AC

NEW QUESTION 7
Which permission is common to the Active Directory Join and Leave operations?

• A. Remove the Cisco ISE machine account from the domain.
• B. Search Active Directory to see if a Cisco ISE machine account already exists.
• C. Set attributes on the Cisco ISE machine account.
• D. Create a Cisco ISE machine account in the domain if the machine account does not already exist.

Answer: B

NEW QUESTION 8
Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two.)

• A. Known
• B. Monthly
• C. Daily
• D. Imported
• E. Random

Answer: AE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/sponsor_guide/b_spons_SponsorPortalUserGuide_13/b_spons_SponsorPortalUserGuide_13_chapter_01.html

NEW QUESTION 9
What is a requirement for Feed Service to work?

• A. TCP port 8080 must be opened between Cisco ISE and the feed server.
• B. Cisco ISE has access to an internal server to download feed update.
• C. Cisco ISE has a base license.
• D. Cisco ISE has Internet access to download feed update.

Answer: B

NEW QUESTION 10
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)

• A. Redirect ACL
• B. Connection Type
• C. Operating System
• D. Windows Settings
• E. iOS Settings

Answer: CE

NEW QUESTION 11
Which protocol must be allowed for a BYOD device to access the BYOD portal?

• A. HTTPS
• B. HTTP
• C. SSH
• D. SMTP

Answer: A

NEW QUESTION 12
What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

• A. continue
• B. pass
• C. drop
• D. reject

Answer: A

NEW QUESTION 13
DRAG DROP
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

NEW QUESTION 14
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

• A. Keep track of guest user activities.
• B. Create and manage guest user accounts.
• C. Configure authorization settings for guest users.
• D. Authenticate guest users to Cisco ISE.

Answer: B

NEW QUESTION 15
If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

• A. Client Provisioning
• B. BYOD
• C. Guest
• D. Blacklist

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010000.html

NEW QUESTION 16
How is policy services node redundancy achieved in a deployment?

• A. by creating a node group
• B. by deploying both primary and secondary node
• C. by enabling VIP
• D. by utilizing RADIUS server list on the NAD

Answer: B

NEW QUESTION 17
What service can be enabled on the Cisco ISE node to identify the types of devices connecting to a network?

• A. profiling
• B. central web authentication
• C. MAB
• D. posture

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

NEW QUESTION 18
What is a valid guest portal type?

• A. Sponsor
• B. Sponsored-Guest
• C. Captive-Guest
• D. My Devices

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_01111.html

NEW QUESTION 19
What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

• A. State attribute
• B. Class attribute
• C. Event
• D. Cisco-av-pair

Answer: D

Explanation:
Reference: https://community.cisco.com/t5/network-access-control/ise-airespace-acl-wlc-problem/td-p/2110491

NEW QUESTION 20
Which two ports do network devices typically use for CoA? (Choose two.)

• A. 19005
• B. 443
• C. 3799
• D. 8080
• E. 1700

Answer: CE

Explanation:
Reference: https://documentation.meraki.com/MR/Encryption_and_Authentication/Change_of_Authorization_with_RADIUS_(CoA)_on_MR_Access_Points

NEW QUESTION 21
......