Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 151:

  Which service must be configured on Cisco ISE to authenticate a network endpoint with the MAC address 00:00:00:00:00:AA by gathering endpoint information dynamically?

  A. 802.1X
  B. posture
  C. profiling
  D. BYOD provisioning
  C. profiling

• Question 152:

  Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

  A. The guest device successfully associates with the correct SSID.
  B. The guest user gets redirected to the authentication page when opening a browser.
  C. The guest device has internal network access on the WLAN.
  D. The guest device can connect to network file shares.
  E. Cisco ISE sends a CoA upon successful guest authentication.
  B. The guest user gets redirected to the authentication page when opening a browser.
  E. Cisco ISE sends a CoA upon successful guest authentication.

• Question 153:

  Which statement about configuring certificates for BYOD is true?

  or

  What should be considered when configuring certificates for BYOD?

  A. An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment
  B. The SAN field is populated with the end user name.
  C. An endpoint certificate is mandatory for the Cisco ISE BYOD
  D. The CN field is populated with the endpoint host name
  D. The CN field is populated with the endpoint host name

• Question 154:

  A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE

  Which command most be issued for this to work?

  A. copy certificate Ise
  B. application configure Ise
  C. certificate configure Ise
  D. Import certificate Ise
  B. application configure Ise

  ---

  Explanation Explanation/Reference:https://community.cisco.com/t5/network-access-control/ise-certificate-import-export/m-p/3847746

• Question 155:

  An engineer must configure a posture policy with Cisco Temporal Agent workflow. Which two configurations must the engineer apply to meet the requirement? (Choose two.)

  A. Configure the Secure Client Posture module.
  B. Configure the client provisioning policy.
  C. Create the posture requirements.
  D. Create the posture condition.
  E. Configure client provisioning resources.
  B. Configure the client provisioning policy.
  D. Create the posture condition.

• Question 156:

  Which device acts as an authenticator during the 802.1X authentication process?

  A. RADIUS server
  B. Cisco switch
  C. LDAP server
  D. Cisco ISE PSN
  B. Cisco switch

• Question 157:

  Which Cisco ISE component intercepts HTTP and HTTPS requests and redirects them to the Guest User Portal?

  A. network access device
  B. Policy Service node
  C. Monitoring node
  D. Administration node
  A. network access device

• Question 158:

  Which file setup method is supported by ZTP on physical appliances?

  A. cfg
  B. iso
  C. img
  D. ova
  C. img

• Question 159:

  Which default "guest type" is included with Cisco ISE?

  A. visitors
  B. sponsor
  C. guest
  D. contractor
  C. guest

• Question 160:

  An engineer must use certificate authentication for endpoints that connect to a wired network with a Cisco ISE deployment. The engineer must define the certificate field used as the principal username. What is needed to complete the configuration?

  A. authorization profile
  B. authentication policy
  C. authorization rule
  D. authentication profile
  D. authentication profile