Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 1:

  DRAG DROP

  Drag and drop the configuration steps from the left into the sequence on the right to install two Cisco ISE nodes in a distributed deployment.

  Select and Place:

  

  

• Question 2:

  Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue.

  Which two requirements must be met to implement this change? (Choose two.)

  A. Enable IPC access over port 80.
  B. Ensure that the NAT address is properly configured
  C. Establish access to one Global Catalog server.
  D. Provide domain administrator access to Active Directory.
  E. Configure a secure LDAP connection.
  C. Establish access to one Global Catalog server.
  D. Provide domain administrator access to Active Directory.

• Question 3:

  Which are two characteristics of TACACS+? (Choose two ) ,

  A. It uses TCP port 49.
  B. It combines authorization and authentication functions.
  C. It separates authorization and authentication functions.
  D. It encrypts the password only.
  E. It uses UDP port 49.
  A. It uses TCP port 49.
  C. It separates authorization and authentication functions.

• Question 4:

  An administrator must authenticate Cisco Secure Client users using a secure token against an LDAP server to grant wireless network access in a Cisco ISE deployment. These configurations have been performed:

  1. configured Microsoft Active Directory as an external identity source

  2. created an authentication policy

  3. created an authorization policy.

  The administrator must create a Secure Client profile to complete the configuration.

  Which protocol must be implemented on the policy by the administrator?

  A. LEAP
  B. EAP-MD5
  C. EAP-GTC
  D. MS-CHAPv2
  C. EAP-GTC

• Question 5:

  An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

  A. permit tcp any any eq
  B. aaa group server radius proxy
  C. IP http port
  D. aaa group server radius
  A. permit tcp any any eq

• Question 6:

  What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

  A. pass
  B. reject
  C. drop
  D. continue
  D. continue

  ---

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

• Question 7:

  A network engineer must enforce access control using special tags without re- engineering the network design, which feature should be configured to achieve this in a scalable manner?

  A. RBAC
  B. VLAN
  C. SGT
  D. dACL
  C. SGT

• Question 8:

  An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands

  How is this accomplished without creating too many objects using Cisco ISE?

  A. Create one shell profile and multiple command sets.
  B. Create multiple shell profiles and multiple command sets.
  C. Create one shell profile and one command set.
  D. Create multiple shell profiles and one command set
  A. Create one shell profile and multiple command sets.

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html https://www.youtube.com/watch?v=IlZwB71Szogandab_channel=JasonMaynard

• Question 9:

  What is used by the CA to issue a certificate to an endpoint?

  A. device network address
  B. device unique identifier
  C. certificate template
  D. certificate provisioning portal
  C. certificate template

• Question 10:

  What are two differences of TACACS+ compared to RADIUS? (Choose two.)

  A. TACACS+ uses a connectionless transport protocol, whereas RADIUS uses a connection-oriented transport protocol.
  B. TACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password.
  C. TACACS+ only encrypts the password, whereas RADIUS encrypts the full packet payload.
  D. TACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a connectionless transport protocol.
  E. TACACS+ supports multiple sessions per user, whereas RADIUS supports one session per user.
  B. TACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password.
  D. TACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a connectionless transport protocol.