The Secret Of Cisco 300-715 Actual Exam

NEW QUESTION 1
Which two default guest portals are available with Cisco ISE? (Choose two.)

• A. visitor
• B. WIFI-access
• C. self-registered
• D. central web authentication
• E. sponsored

Answer: CE

NEW QUESTION 2
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)

• A. Windows Settings
• B. Connection Type
• C. iOS Settings
• D. Redirect ACL
• E. Operating System

Answer: BE

Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_

NEW QUESTION 3
What should be considered when configuring certificates for BYOD?

• A. An endpoint certificate is mandatory for the Cisco ISE BYOD
• B. An Android endpoint uses EST whereas other operation systems use SCEP for enrollment
• C. The CN field is populated with the endpoint host name.
• D. The SAN field is populated with the end user name

Answer: A

NEW QUESTION 4
An administrator is configuring a Cisco WLC for web authentication Which two client profiling methods are enabled by default if the Apply Cisco ISE Default Settings check box has been selected'? (Choose two.)

• A. CDP
• B. DHCP
• C. HTTP
• D. SNMP
• E. LLDP

Answer: AE

NEW QUESTION 5
An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list Why is this occurring?

• A. The dynamic logical profile is overriding the statically assigned profile
• B. The device is changing identity groups after profiling instead ot remaining static
• C. The logical profile is being statically assigned instead of the identity group
• D. The identity group is being assigned instead of the logical profile

Answer: C

NEW QUESTION 6
What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

• A. updates
• B. remediation actions
• C. Client Provisioning portal
• D. conditions
• E. access policy

Answer: BD

NEW QUESTION 7
Which profiling probe collects the user-agent string?

• A. DHCP
• B. AD
• C. HTTP
• D. NMAP

Answer: C

NEW QUESTION 8
An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

• A. permit tcp any any eq <port number>
• B. aaa group server radius proxy
• C. ip http port <port number>
• D. aaa group server radius

Answer: C

NEW QUESTION 9
An administrator is troubleshooting an endpoint that is supposed to bypass 802 1X and use MAB. The endpoint is bypassing 802.1X and successfully getting network access using MAB. however the endpoint cannot communicate because it cannot obtain an IP address. What is the problem?

• A. The DHCP probe for Cisco ISE is not working as expected.
• B. The 802.1 X timeout period is too long.
• C. The endpoint is using the wrong protocol to authenticate with Cisco ISE.
• D. An AC I on the port is blocking HTTP traffic

Answer: B

NEW QUESTION 10
Drag and drop the configuration steps from the left into the sequence on the right to install two Cisco ISE nodes in a distributed deployment.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 11
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

• A. Authentication is redirected to the internal identity source.
• B. Authentication is redirected to the external identity source.
• C. Authentication is granted.
• D. Authentication fails.

Answer: D

NEW QUESTION 12
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

• A. DHCP server
• B. static IP tunneling
• C. override Interface ACL
• D. AAA override

Answer: D

NEW QUESTION 13
An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

• A. Port Bounce
• B. Port Shutdown
• C. Session Termination
• D. Session Reauthentication

Answer: D

NEW QUESTION 14
An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’. Which two actions occur within Cisco ISE as a result oí this action? (Choose two)

• A. Certificates provisioned to the device are not revoked
• B. BYOD Registration status is updated to No
• C. The device access has been denied
• D. BYOD Registration status is updated to Unknown.
• E. The device status is updated to Stolen

Answer: AB

Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide

NEW QUESTION 15
A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?

• A. Configure the sponsor group to increase the number of logins.
• B. Use a custom portal to increase the number of logins
• C. Modify the guest type to increase the number of maximum devices
• D. Create an Adaptive Network Control policy to increase the number of devices

Answer: C

Explanation:
https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/2-7/admin_guide

NEW QUESTION 16
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

• A. Profiling
• B. Guest access
• C. Client provisioning
• D. Posture

Answer: A

NEW QUESTION 17
An administrator is configuring posture with Cisco ISE and wants to check that specific services are present on the workstations that are attempting to access the network. What must be configured to accomplish this goal?

• A. Create a registry posture condition using a non-OPSWAT API version.
• B. Create an application posture condition using a OPSWAT API version.
• C. Create a compound posture condition using a OPSWAT API version.
• D. Create a service posture condition using a non-OPSWAT API version.

Answer: D

NEW QUESTION 18
An engineer is configuring a dedicated SSID for onboarding devices. Which SSID type accomplishes this configuration?

• A. dual
• B. hidden
• C. broadcast
• D. guest

Answer: A

Explanation:
https://community.cisco.com/t5/security-documents/ise-byod-dual-vs-single-ssid-onboarding/ta-p/3641422 https://www.youtube.com/watch?v=HH_Xasqd9k4&ab_channel=CiscoISE-IdentityServicesEngine http://www.labminutes.com/sec0053_ise_1_1_byod_wireless_onboarding_dual_ssid

NEW QUESTION 19
Select and Place

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 20
......