(May 2024) Updated 300-715 Dumps (V19.02) – A Deep Dive into the Actual 300-715 SISE Exam Questions

1. What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

2. What is a method for transporting security group tags throughout the network?

3. Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).

4. Which profiling probe collects the user-agent string?

5. Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

6. Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

7. Which three default endpoint identity groups does cisco ISE create? (Choose three)

8. DRAG DROP

Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

9. Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

10. Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

11. Refer to the exhibit:

Which command is typed within the CU of a switch to view the troubleshooting output?

12. What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

13. Which two probes must be enabled for the ARP cache to function in the Cisco ISE profile service so that a user can reliably bind the IP address and MAC addresses of endpoints? (Choose two.)

14. Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

15. What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

16. Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two)

17. How is policy services node redundancy achieved in a deployment?

18. If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

19. A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server.

Which command is the user missing in the switch’s configuration?

20. What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)

21. Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

22. What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

23. What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

24. Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

25. Which statement about configuring certificates for BYOD is true?

26. What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

27. Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

28. What is a requirement for Feed Service to work?

29. Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

30. What is a valid guest portal type?

31. What is needed to configure wireless guest access on the network?

32. Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

33. Which portal is used to customize the settings for a user to log in and download the compliance module?

34. Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

35. Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

36. Which protocol must be allowed for a BYOD device to access the BYOD portal?

37. In which two ways can users and endpoints be classified for TrustSec? (Choose Two.)

38. Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two)

39. When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

40. What is the purpose of the ip http server command on a switch?

41. What are two requirements of generating a single signing in Cisco ISE by using a certificate provisioning portal, without generating a certificate request? (Choose two)

42. What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?

43. What does the dot1x system-auth-control command do?

44. Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

45. Which personas can a Cisco ISE node assume'?

46. What is a characteristic of the UDP protocol?

47. Which two endpoint compliance statuses are possible? (Choose two.)

48. DRAG DROP

Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

49. Which are two characteristics of TACACS+? (Choose two)

50. Which two ports do network devices typically use for CoA? (Choose two)

51. Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two)

52. Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)

53. What is the minimum certainty factor when creating a profiler policy?

54. What gives Cisco ISE an option to scan endpoints for vulnerabilities?

55. A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

56. Which interface-level command is needed to turn on 802 1X authentication?

57. Which permission is common to the Active Directory Join and Leave operations?

58. Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

59. During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

60. Which use case validates a change of authorization?

61. A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?

62. An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

63. An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types.

Which probe should be used to accomplish this task?

64. An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network.

Which action should accomplish this task?

65. An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port.

Which command should be used to accomplish this task?

66. An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall.

Which two ports should be opened to accomplish this task? (Choose two)

67. Refer to the exhibit.

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server.

Which two commands should be run to complete the configuration? (Choose two)

68. An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication.

Which access will be denied in this?

69. A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components.

Which two protocols should complete this task?

70. An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks.

Which two requirement complete this policy? (Choose two)

71. Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

72. When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network.

Why should the engineer configure MAB in this situation?

73. In a Cisco ISE split deployment model, which load is split between the nodes?

74. An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication.

Which command should be used to complete this configuration?

75. Which two default endpoint identity groups does Cisco ISE create? (Choose two)