How Many Questions Of 300-715 Study Guides

NEW QUESTION 1
What is the purpose of the ip http server command on a switch?

• A. It enables the https server for users for web authentication
• B. It enables MAB authentication on the switch
• C. It enables the switch to redirect users for web authentication.
• D. It enables dot1x authentication on the switch.

Answer: C

NEW QUESTION 2
An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types. Which probe should be used to accomplish this task?

• A. MMAP
• B. DNS
• C. DHCP
• D. RADIUS

Answer: C

NEW QUESTION 3
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

• A. Create the redirect ACL on the WLC and add it to the WLC policy
• B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy.
• C. Create the redirect ACL on Cisco ISE and add it to the WLC policy
• D. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

Answer: B

NEW QUESTION 4
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?

• A. HTTP
• B. DNS
• C. EAP
• D. DHCP

Answer: A

NEW QUESTION 5
Which personas can a Cisco ISE node assume'?

• A. policy service, gatekeeping, and monitoring
• B. administration, policy service, and monitoring
• C. administration, policy service, gatekeeping
• D. administration, monitoring, and gatekeeping

Answer: B

Explanation:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html
The persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.

NEW QUESTION 6
A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication Which two commands must be entered to meet this requirement? (Choose two)

• A. Ip http secure-authentication
• B. Ip http server
• C. Ip http redirection
• D. Ip http secure-server
• E. Ip http authentication

Answer: BD

Explanation:
https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuratio

NEW QUESTION 7
Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue. Which two requirements must be met to implement this change? (Choose two.)

• A. Enable IPC access over port 80.
• B. Ensure that the NAT address is properly configured
• C. Establish access to one Global Catalog server.
• D. Provide domain administrator access to Active Directory.
• E. Configure a secure LDAP connection.

Answer: CD

NEW QUESTION 8
There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must be done to accomplish this goal?

• A. Enter the MAC address in the correct Endpoint Identity Group.
• B. Enter the MAC address in the correct Logical Profile.
• C. Enter the IP address in the correct Logical Profile.
• D. Enter the IP address in the correct Endpoint Identity Group.

Answer: A

NEW QUESTION 9
What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

• A. pass
• B. reject
• C. drop
• D. continue

Answer: D

Explanation:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

NEW QUESTION 10
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

• A. Keep track of guest user activities
• B. Configure authorization settings for guest users
• C. Create and manage guest user accounts
• D. Authenticate guest users to Cisco ISE

Answer: C

NEW QUESTION 11
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 12
An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?

• A. dACLs to enforce the various access policies for the users
• B. custom access conditions for defining the different roles
• C. shell profiles with custom attributes that define the various roles
• D. TACACS+ command sets to provide appropriate access

Answer: C

NEW QUESTION 13
An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

• A. Anyconnect network visibility module
• B. Anyconnect compliance module
• C. AnyConnectProfile.xml file
• D. AnyConnectProfile.xsd file
• E. Anyconnect agent image

Answer: BD

NEW QUESTION 14
When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

• A. MIB
• B. TGT
• C. OMAB
• D. SID

Answer: D

NEW QUESTION 15
An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

• A. permit tcp any any eq <port number>
• B. aaa group server radius proxy
• C. ip http port <port number>
• D. aaa group server radius

Answer: C

NEW QUESTION 16
Which protocol must be allowed for a BYOD device to access the BYOD portal?

• A. HTTP
• B. SMTP
• C. HTTPS
• D. SSH

Answer: C

NEW QUESTION 17
An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers What must be done to accomplish this task?

• A. Create a sponsor portal to allow guests to create accounts using their social media logins.
• B. Create a sponsored guest portal and enable social media in the external identity sources.
• C. Create a self-registered guest portal and enable the feature for social media logins
• D. Create a hotspot portal and enable social media login for network access

Answer: C

NEW QUESTION 18
Which Cisco ISE solution ensures endpoints have the latest version of antivirus updates installed before being allowed access to the corporate network?

• A. Threat Services
• B. Profiling Services
• C. Provisioning Services
• D. Posture Services

Answer: D

NEW QUESTION 19
An administrator has added a new Cisco ISE PSN to their distributed deployment. Which two features must the administrator enable to accept authentication requests and profile the endpoints correctly, and add them to their respective endpoint identity groups? (Choose two )

• A. Session Services
• B. Endpoint Attribute Filter
• C. Posture Services
• D. Profiling Services
• E. Radius Service

Answer: DE

NEW QUESTION 20
A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server. Which command is the user missing in the switch’s configuration?

• A. radius-server vsa send accounting
• B. aaa accounting network default start-stop group radius
• C. aaa accounting resource default start-stop group radius
• D. aaa accounting exec default start-stop group radios

Answer: A

NEW QUESTION 21
......