Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 201:

  An engineer must use Cisco ISE to provide network access to endpoints that cannot support 802.1X. The endpoint MAC addresses must be allowlisted by configuring an endpoint identity group. These configurations were performed:

  configured an identity group named allowlist configured the endpoints to use the MAC address of incompatible 802.1X devices added the endpoints to the allowlist identity group configured an authentication policy for MAB users

  What must be configured?

  A. authorization policy that has the PermitAccess permission and matches the allowlist identity group
  B. logical profile that matches the allowlist identity group based on the configured policy
  C. authentication profile that has the PermitAccess permission and matches the allowlist identity group
  D. authorization profile that has the PermitAccess permission and matches the allowlist identity group
  A. authorization policy that has the PermitAccess permission and matches the allowlist identity group

• Question 202:

  An administrator is configuring a Cisco ISE posture agent in the client provisioning policy and needs to ensure that the posture policies that interact with clients are monitored, and end users are required to comply with network usage rules Which two resources must be added in Cisco ISE to accomplish this goal? (Choose two)

  A. AnyConnect
  B. Supplicant
  C. Cisco ISE NAC
  D. PEAP
  E. Posture Agent
  A. AnyConnect
  E. Posture Agent

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_AnyConnect_Administrator_Guide4-0/configure-posture.html https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/ b_ISE_admin_guide_24/m_configure_client_provisioning.html#task_D1C2E8ECE1D54D259C01BCBF0A5822F1

• Question 203:

  The IT manager wants to provide different levels of access to network devices when users authenticate using TACACS+. The company needs specific commands to be allowed based on the Active Directory group membership of the different roles within the IT department. The solution must minimize the number of objects created in Cisco ISE. What must be created to accomplish this task?

  A. one shell profile and one command set
  B. multiple shell profiles and one command set
  C. one shell profile and multiple command sets
  D. multiple shell profiles and multiple command sets
  D. multiple shell profiles and multiple command sets

• Question 204:

  Which valid external identity source can be used with Cisco ISE?

  A. IPsec vpn authentication
  B. smart card
  C. local user name and password
  D. TACACS+ token
  B. smart card

• Question 205:

  Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two )

  A. access-response
  B. access-request
  C. access-reserved
  D. access-accept
  E. access-challenge
  D. access-accept
  E. access-challenge

• Question 206:

  An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirement complete this policy? (Choose two)

  A. minimum password length
  B. active username limit
  C. access code control
  D. gpassword expiration period
  E. username expiration date
  A. minimum password length
  D. gpassword expiration period

• Question 207:

  An engineer needs to create a Self-Registered Guest Portal in Cisco ISE in which guest users receive their passwords via SMS. Which two settings must be configured to accomplish this task? (Choose two.)

  A. Choose the SMS provider previously configured as a SMS gateway under the Registration Form Settings.
  B. Select SMS for the Send Credential upon notification setting under Registration Form Settings.
  C. Choose the SMS provider previously configured as a SMS gateway under Device Registration Settings.
  D. Select Allow employees to use personal devices and SMS for notifications under BYOD.
  E. Select SMS for the Send Credential upon notification setting under the Login Page Settings.
  A. Choose the SMS provider previously configured as a SMS gateway under the Registration Form Settings.
  B. Select SMS for the Send Credential upon notification setting under Registration Form Settings.

• Question 208:

  An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network They have multiple vendors' firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this

  What should be done to enable this type of posture check?

  A. Use the file registry condition to ensure that the firewal is installed and running appropriately.
  B. Use a compound condition to look for the Windows or Mac native firewall applications.
  C. Enable the default firewall condition to check for any vendor firewall application.
  D. Enable the default application condition to identify the applications installed and validade the firewall app.
  C. Enable the default firewall condition to check for any vendor firewall application.

  ---

  Explanation Explanation/Reference:https://www.youtube.com/watch?v=6Kj8P8Hn7dYandt=109sandab_channel=CiscoISE- IdentityServicesEngine

• Question 209:

  An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

  A. Install SSL certificates
  B. Create a node group
  C. Enable profiling services
  D. Enable session services
  D. Enable session services

• Question 210:

  An administrator must block access to BYOD endpoints that were onboarded without a certificate and have been reported as stolen in the Cisco ISE My Devices Portal. Which condition must be used when configuring an authorization policy that sets DenyAccess permission?

  A. Endpoint Identity Group is Blocklist, and the BYOD state is Registered.
  B. Endpoint Identify Group is Blocklist, and the BYOD state is Pending.
  C. Endpoint Identity Group is Blocklist, and the BYOD state is Lost.
  D. Endpoint Identity Group is Blocklist, and the BYOD state is Reinstate.
  A. Endpoint Identity Group is Blocklist, and the BYOD state is Registered.

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_byod.html