Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 91:

  What is the maximum number of PSN nodes supported in a medium-sized deployment?

  A. two
  B. three
  C. five
  D. eight
  C. five

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26/b_ise_InstallationGuide_26_chapter_00.pdf

• Question 92:

  Which platform does a Windows-based device download the Network Assistant from?

  A. Microsoft app store
  B. Cisco ISE
  C. native OS
  D. Cisco download site
  B. Cisco ISE

• Question 93:

  A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

  A. Keep track of guest user activities
  B. Configure authorization settings for guest users
  C. Create and manage guest user accounts
  D. Authenticate guest users to Cisco ISE
  C. Create and manage guest user accounts

• Question 94:

  Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

  A. show authentication sessions output
  B. Show authentication sessions
  C. show authentication sessions interface Gi 1/0/x
  D. show authentication sessions interface Gi1/0/x output
  B. Show authentication sessions

• Question 95:

  An administrator is configuring a Cisco WLC for web authentication.

  Which two client profiling methods are enabled by default if the Apply Cisco ISE Default Settings check box has been selected'? (Choose two.)

  A. CDP
  B. DHCP
  C. HTTP
  D. SNMP
  E. LLDP
  B. DHCP
  C. HTTP

• Question 96:

  An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Discovery Protocol and LLDP endpoint information from a Cisco switch. These configurations were performed:

  configured switches to accept SNMP queries from Cisco ISE enabled Cisco Discovery Protocol and LLDP on the switches added the switch as a NAD to Cisco ISE

  What must be enabled to complete the configuration?

  A. SNMP traps on the switch
  B. SNMP MIBs in Cisco ISE
  C. SNMP Trap probe in Cisco ISE
  D. SNMP Query probe in Cisco ISE
  D. SNMP Query probe in Cisco ISE

• Question 97:

  An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers

  What must be done to accomplish this task?

  A. Create a sponsor portal to allow guests to create accounts using their social media logins.
  B. Create a sponsored guest portal and enable social media in the external identity sources.
  C. Create a self-registered guest portal and enable the feature for social media logins
  D. Create a hotspot portal and enable social media login for network access
  C. Create a self-registered guest portal and enable the feature for social media logins

• Question 98:

  An engineer is configuring posture assessment for their network access control and needs to use an agent that supports using service conditions as conditions for the assessment. The agent should be run as a background process to avoid user interruption but when it is run. the user can see it. What is the problem?

  A. The engineer is using the "Anyconnect" posture agent but should be using the "Stealth Anyconnect posture agent
  B. The posture module was deployed using the headend instead of installing it with SCCM
  C. The user was in need of remediation so the agent appeared m the notifications
  D. The proper permissions were no! given to the temporal agent to conduct the assessment
  A. The engineer is using the "Anyconnect" posture agent but should be using the "Stealth Anyconnect posture agent

• Question 99:

  An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direct the guests to a web page on Cisco ISE for authentication. Which type of authentication must be configured for the guest portal in Cisco ISE?

  A. EWA
  B. DWA
  C. CWA
  D. web portal
  C. CWA

• Question 100:

  Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user's traffic using inline tagging to prevent unauthenticated users from accessing a restricted server. The configurations were performed:

  configured Cisco ISE as a Cisco TrustSec AAA server configured the switch as a RADIUS device in Cisco ISE configured the wireless LAN controller as a TrustSec device in Cisco ISE created a security group tag for the wireless users created a certificate authentication profile created an identity source sequence assigned an appropriate security group tag to the wireless users defined security group access control lists to specify an egress policy enforced the access control lists on the TrustSec policy matrix in Cisco ISE configured TrustSec on the switch configured TrustSec on the wireless LAN controller

  Which two actions must be taken to complete the configuration? (Choose two.)

  A. Configure Security Group Tag Exchange Protocol on the wireless LAN controller.
  B. Configure Security Group Tag Exchange Protocol to distribute IP to security group tags on Cisco ISE.
  C. Configure inline tag propagation on the switch and wireless LAN controller.
  D. Create static IP-to-SGT mapping for the restricted web server.
  E. Configure Security Group Tag Exchange Protocol on the switch.
  A. Configure Security Group Tag Exchange Protocol on the wireless LAN controller.
  D. Create static IP-to-SGT mapping for the restricted web server.