Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 111:

  What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

  A. Network Access Control
  B. My Devices Portal
  C. Application Visibility and Control
  D. Supplicant Provisioning Wizard
  D. Supplicant Provisioning Wizard

• Question 112:

  An engineer is configuring a new switch to deploy in the campus network. The task is to configure TACACS+ and RADIUS authentication using the new switch and Cisco ISE. What is the procedure for adding this new switch on the network resources page?

  A. network devices profiles > add
  B. default device > add
  C. network devices > add
  D. network devices groups > add
  C. network devices > add

• Question 113:

  DRAG DROP

  Drag the descriptions on the left onto the components of 802.1X on the right.

  Select and Place:

  

  

  ---

  https://netlabz.wordpress.com/2016/09/24/cisco-ise-fundamentals/

  

• Question 114:

  A laptop was stolen and a network engineer added it to the block list endpoint identity group What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?

  A. Select DenyAccess within the authorization policy.
  B. Ensure that access to port 8443 is allowed within the ACL.
  C. Ensure that access to port 8444 is allowed within the ACL.
  D. Select DROP under If Auth fail within the authentication policy.
  C. Ensure that access to port 8444 is allowed within the ACL.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010000.html

• Question 115:

  A user misplaces a personal phone and wants to blacklist the device from accessing the company network. The company uses Cisco ISE for corporate and BYOD device authentication.

  Which action must the user take in Cisco ISE?

  A. Sign in to the My Devices portal and mark the device as irrecoverable.
  B. Sign in to the BYOD portal and mark the device as irrecoverable.
  C. Sign in to the BYOD portal and mark the device as Lost.
  D. Sign in to the My Devices portal and mark the device as Lost.
  D. Sign in to the My Devices portal and mark the device as Lost.

• Question 116:

  An administrator is configuring posture with Cisco ISE and wants to check that specific services are present on the workstations that are attempting to access the network. What must be configured to accomplish this goal?

  A. Create a registry posture condition using a non-OPSWAT API version.
  B. Create an application posture condition using a OPSWAT API version.
  C. Create a compound posture condition using a OPSWAT API version.
  D. Create a service posture condition using a non-OPSWAT API version.
  D. Create a service posture condition using a non-OPSWAT API version.

• Question 117:

  A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for one day When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest network after that period. Which configuration is causing this problem?

  A. The Endpoint Purge Policy is set to 30 days for guest devices
  B. The RADIUS policy set for guest access is set to allow repeated authentication of the same device
  C. The length of access is set to 7 days in the Guest Portal Settings
  D. The Guest Account Purge Policy is set to 15 days
  A. The Endpoint Purge Policy is set to 30 days for guest devices

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_01101.html#:~:text=C isco%20ISE%2C%20by%20default%2C%20deletes,5000%20endpoints%20every% 20three%20minutes.

• Question 118:

  Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

  A. TCP 8909
  B. TCP 8905
  C. CUDP 1812
  D. TCP 443
  B. TCP 8905

• Question 119:

  Which port does cisco ISE use for native supplicant provisioning of a windows computer?

  A. TCP/UDP 8905
  B. TCP 8443
  C. TCP/UDP 8909
  D. TCP 443
  A. TCP/UDP 8905

• Question 120:

  A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

  A. SGT
  B. dACL
  C. VLAN
  D. RBAC
  A. SGT