Preparing for Your Exam By Using 300-715 Dumps (V21.02): Check 300-715 Free Dumps (Part 1, Q1-Q40) First

1. What is a requirement for Feed Service to work?

2. In a Cisco ISE split deployment model, which load is split between the nodes?

3. What is the purpose of the ip http server command on a switch?

4. What is the minimum certainty factor when creating a profiler policy?

5. A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice.

Which command should the engineer run on the interface to accomplish this goal?

6. Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two)

7. Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

8. When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network.

Why should the engineer configure MAB in this situation?

9. How is policy services node redundancy achieved in a deployment?

10. Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

11. What is the deployment mode when two Cisco ISE nodes are configured in an environment?

12. What is needed to configure wireless guest access on the network?

13. Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

14. DRAG DROP

Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

15. An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected.

Which service should be used to accomplish this task?

16. What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

17. An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones The phones do not have the ability to authenticate via 802 1X.

Which command is needed on each switch port for authentication?

18. What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

19. Which two roles are taken on by the administration person within a Cisco ISE distributed environment? (Choose two.)

20. Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).

21. Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

22. In which two ways can users and endpoints be classified for TrustSec? (Choose Two.)

23. 1.What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

24. A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server.

Which command is the user missing in the switch’s configuration?

25. A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

26. What is a valid guest portal type?

27. Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two)

28. What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

29. An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened.

From which Cisco ISE persona should this traffic be originating?

30. An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks.

Which two requirement complete this policy? (Choose two)

31. Which profiling probe collects the user-agent string?

32. An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.

Which persona should be configured with the largest amount of storage in this environment?

33. Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

34. In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two)

35. Which two endpoint compliance statuses are possible? (Choose two.)

36. What gives Cisco ISE an option to scan endpoints for vulnerabilities?

37. Which interface-level command is needed to turn on 802 1X authentication?

38. Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two)

39. Which permission is common to the Active Directory Join and Leave operations?

40. An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE.

What must be configured within Cisco ISE to accomplish this goal?