Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 211:

  An engineer configures Cisco ISE and Cisco Catalyst switches to enforce Cisco TrustSec policies. The engineer must use a nondisruptive deployment approach for new devices by deploying TrustSec policies in staging, preproduction, and production. Which action must be taken to complete the configuration?

  A. Configure Security Group Tag Exchange Protocol on the new devices and integrate the devices in groups with Cisco ISE.
  B. Configure policy matrices in Cisco ISE and assign the new devices to the policy matrices.
  C. Integrate the new devices in staging, preproduction, and production network device groups.
  D. Configure a different security group tag for the new devices in the staging, preproduction, and production stages.
  A. Configure Security Group Tag Exchange Protocol on the new devices and integrate the devices in groups with Cisco ISE.

• Question 212:

  The profiling data from network access devices is sent to which Cisco ISE node?

  A. Monitoring node
  B. Administration node
  C. Inline Posture node
  D. Policy Service node
  D. Policy Service node

• Question 213:

  In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)

  A. publisher
  B. administration
  C. primary
  D. policy service
  E. subscriber
  B. administration
  D. policy service

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_010.html

• Question 214:

  An engineer is configuring 802.1X and wants it to be transparent from the users' point of view. The implementation should provide open authentication on the switch ports while providing strong levels of security for non-authenticated devices. Which deployment mode should be used to achieve this?

  A. closed
  B. low-impact
  C. open
  D. high-impact
  B. low-impact

  ---

  https://www.lookingpoint.com/blog/cisco-ise-wired-802.1x-deployment-monitormode#:~:text=Low%20impact%20mode%20works%20similar,DHCP%2C%20PXE%20boot%2 C%20etc.

• Question 215:

  An engineer configured posture assessment for their network access control with the goal of using an agent that supports using service conditions for the assessment. The agent should run as a background process to avoid user interruption, but the user can see it when it is run. What is the problem?

  A. The selected posture agent does not support the engineer's goal.
  B. The posture module was deployed using the headend instead of installing it with SCCM.
  C. The proper permissions were not given to the temporal agent to conduct the assessment.
  D. The user required remediation so the agent appeared in the notifications.
  A. The selected posture agent does not support the engineer's goal.

• Question 216:

  What is the Cisco ISE default admin login name and password?

  A. ISEAdmin/admin
  B. admin/cisco
  C. admin/no default password--the admin password is configured at setup
  D. admin/admin
  C. admin/no default password--the admin password is configured at setup

• Question 217:

  Which persona configuration feature is used when setting personas in Cisco ISE for a node that will give network access and receive RADIUS requests?

  A. pxGrid Node
  B. Monitoring Node
  C. Policy Service Node
  D. Policy Administration Node
  C. Policy Service Node

• Question 218:

  A network engineer received alerts from the monitoring platform that a switch port exists with multiple sessions. RADIUS CoA using Cisco ISE must be used to address the issue. Which RADIUS CoA configuration must be used?

  A. port bounce
  B. no CoA
  C. exception
  D. reauth
  A. port bounce

• Question 219:

  An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information. Which probe should be enabled to meet these requirements?

  A. NetFlow probe
  B. DNS probe
  C. DHCP probe
  D. SNMP query probe
  C. DHCP probe

  ---

  Explanation Explanation/Reference:http://www.network-node.com/blog/2016/1/2/ise-20-profiling

• Question 220:

  What gives Cisco ISE an option to scan endpoints for vulnerabilities?

  A. authorization policy
  B. authentication policy
  C. authentication profile
  D. authorization profile
  D. authorization profile

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010100.html