How Many Questions Of 300-715 Braindumps

NEW QUESTION 1
Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

• A. Device Administration License
• B. Server Sequence
• C. Command Sets
• D. Enable Device Admin Service
• E. External TACACS Servers

Answer: AD

NEW QUESTION 2
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

• A. Create the redirect ACL on the WLC and add it to the WLC policy
• B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy.
• C. Create the redirect ACL on Cisco ISE and add it to the WLC policy
• D. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

Answer: B

NEW QUESTION 3
A Cisco device has a port configured in multi-authentication mode and is accepting connections only from hosts assigned the SGT of SGT_0422048549 The VLAN trunk link supports a maximum of 8 VLANS What is the reason for these restrictions?

• A. The device is performing inline tagging without acting as a SXP speaker
• B. The device is performing mime tagging while acting as a SXP speaker
• C. The IP subnet addresses are dynamically mapped to an SGT.
• D. The IP subnet addresses are statically mapped to an SGT

Answer: C

NEW QUESTION 4
Refer to the exhibit:

Which command is typed within the CU of a switch to view the troubleshooting output?

• A. show authentication sessions mac 000e.84af.59af details
• B. show authentication registrations
• C. show authentication interface gigabitethemet2/0/36
• D. show authentication sessions method

Answer: A

NEW QUESTION 5
An engineer must configure Cisco ISE to provide internet access for guests in which guests are required to enter a code to gain network access. Which action accomplishes the goal?

• A. Configure the hotspot portal for guest access and require an access code.
• B. Configure the sponsor portal with a single account and use the access code as the password.
• C. Configure the self-registered guest portal to allow guests to create a personal access code.
• D. Create a BYOD policy that bypasses the authentication of the user and authorizes access codes.

Answer: A

NEW QUESTION 6
An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

• A. dot1x pae authenticator
• B. dot1x system-auth-control
• C. authentication port-control auto
• D. aaa authentication dot1x default group radius

Answer: B

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/dot1x.

NEW QUESTION 7
A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server. Which command is the user missing in the switch’s configuration?

• A. radius-server vsa send accounting
• B. aaa accounting network default start-stop group radius
• C. aaa accounting resource default start-stop group radius
• D. aaa accounting exec default start-stop group radios

Answer: A

NEW QUESTION 8
What does the dot1x system-auth-control command do?

• A. causes a network access switch not to track 802.1x sessions
• B. globally enables 802.1x
• C. enables 802.1x on a network access device interface
• D. causes a network access switch to track 802.1x sessions

Answer: B

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380

NEW QUESTION 9
An engineer tests Cisco ISE posture services on the network and must configure the compliance module to automatically download and install on endpoints Which action accomplishes this task for VPN users?

• A. Create a Cisco AnyConnect configuration and Client Provisioning policy within Cisco ISE.
• B. Configure the compliance module to be downloaded from within the posture policy.
• C. Push the compliance module from Cisco FTD prior to attempting posture.
• D. Use a compound posture condition to check for the compliance module and download if needed.

Answer: A

NEW QUESTION 10
Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

• A. The guest device successfully associates with the correct SSID.
• B. The guest user gets redirected to the authentication page when opening a browser.
• C. The guest device has internal network access on the WLAN.
• D. The guest device can connect to network file shares.
• E. Cisco ISE sends a CoA upon successful guest authentication.

Answer: BE

NEW QUESTION 11
What is the purpose of the ip http server command on a switch?

• A. It enables the https server for users for web authentication
• B. It enables MAB authentication on the switch
• C. It enables the switch to redirect users for web authentication.
• D. It enables dot1x authentication on the switch.

Answer: C

NEW QUESTION 12
An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

• A. Anyconnect network visibility module
• B. Anyconnect compliance module
• C. AnyConnectProfile.xml file
• D. AnyConnectProfile.xsd file
• E. Anyconnect agent image

Answer: BD

NEW QUESTION 13
An engineer is configuring sponsored guest access and needs to limit each sponsored guest to a maximum of two devices. There are other guest services in production that rely on the default guest types. How should this configuration change be made without disrupting the other guest services currently offering three or more guest devices per user?

• A. Create an ISE identity group to add users to and limit the number of logins via the group configuration.
• B. Create a new guest type and set the maximum number of devices sponsored guests can register
• C. Create an LDAP login for each guest and tag that in the guest portal for authentication.
• D. Create a new sponsor group and adjust the settings to limit the devices for each guest.

Answer: D

NEW QUESTION 14
An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic. Which type of access list should be used for this configuration?

• A. reflexive ACL
• B. extended ACL
• C. standard ACL
• D. numbered ACL

Answer: B

NEW QUESTION 15
An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or
PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16
Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

• A. MSCHAPv1
• B. PAP
• C. EAP
• D. CHAP
• E. MSCHAPV2

Answer: CE

NEW QUESTION 17
What is a valid guest portal type?

• A. Sponsored-Guest
• B. My Devices
• C. Sponsor
• D. Captive-Guest

Answer: A

NEW QUESTION 18
A network administrator is currently using Cisco ISE to authenticate devices and users via 802 1X There is now a need to also authorize devices and users using EAP-TLS. Which two additional components must be configured in Cisco ISE to accomplish this'? (Choose two.)

• A. Network Device Group
• B. Serial Number attribute that maps to a CA Server
• C. Common Name attribute that maps to an identity store
• D. Certificate Authentication Profile
• E. EAP Authorization Profile

Answer: CD

NEW QUESTION 19
Which two probes must be enabled for the ARP cache to function in the Cisco ISE profile service so that a user can reliably bind the IP address and MAC addresses of endpoints? (Choose two.)

• A. NetFlow
• B. SNMP
• C. HTTP
• D. DHCP
• E. RADIUS

Answer: DE

Explanation:
Cisco ISE implements an ARP cache in the profiling service, so that you can reliably map the IP addresses and the MAC addresses of endpoints. For the ARP cache to function, you must enable either the DHCP probe or the RADIUS probe. The DHCP and RADIUS probes carry the IP addresses and the MAC addresses of endpoints in the payload data. The dhcp-requested address attribute in the DHCP probe and the Framed-IP-address attribute in the RADIUS probe carry the IP addresses of endpoints, along with their MAC addresses, which can be mapped and stored in the ARP cache.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide

NEW QUESTION 20
......