Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 241:

  An engineer must create and sign a new certificate for all the portals in a Cisco ISE environment of a company. The company reports that wildcard certificates are blocked in the environment.

  Which action must the engineer take before signing the certificate?

  A. Create a DNS AAAA record for the FQDN of the Cisco ISE Monitoring node.
  B. Add the FQDN of each portal to the SAN field in the CSR
  C. Add the FQDN of each portal to the CN field in the CSR.
  D. Create a DNS AAA record for the FQDN of the Cisco ISE Administration node.
  B. Add the FQDN of each portal to the SAN field in the CSR

• Question 242:

  Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two )

  A. Random
  B. Monthly
  C. Daily
  D. Imported
  E. Known
  A. Random
  D. Imported

• Question 243:

  An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirements complete this policy? (Choose two.)

  A. minimum password length
  B. active username limit
  C. access code control
  D. password expiration period
  E. username expiration date
  A. minimum password length
  D. password expiration period

• Question 244:

  An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types. Which probe should be used to accomplish this task?

  A. MMAP
  B. DNS
  C. DHCP
  D. RADIUS
  C. DHCP

• Question 245:

  Which Cisco ISE module contains a list of vendor names, product names, and attributes provided by OPSWAT?

  A. Compliance Module
  B. Client Provisioning Module
  C. Endpoint Security Module
  D. Posture Module
  A. Compliance Module

• Question 246:

  An administrator is configuring MAB and needs to create profiling policies to support devices that do not match the built-in profiles.

  Which two steps must the administrator take in order to use these new profiles in authorization policies? (Choose two.)

  A. Edit the authorization policy to give the profiles as a result of the authentication and authorization results
  B. Use the profiling policies as the matching conditions in each authorization policy
  C. Modify the endpoint identity group to feed the profiling policies into and match the parent group in the policy
  D. Configure the profiling policy to make a matching identity group and use the group in the authorization policy
  E. Feed the profiling policies into a logical profile and use the logical profile in the authorization policy
  D. Configure the profiling policy to make a matching identity group and use the group in the authorization policy
  E. Feed the profiling policies into a logical profile and use the logical profile in the authorization policy

• Question 247:

  The default Cisco ISE node configuration has which role or roles enabled by default?

  A. Administration only
  B. Inline Posture only
  C. Administration and Pokey Service
  D. Policy Service Monitoring, and Administration
  D. Policy Service Monitoring, and Administration

• Question 248:

  An engineer is using profiling to determine what access an endpoint must receive. After configuring both Cisco ISE and the network devices for 802.1X and profiling, the endpoints do not profile prior to authentication.

  What are two reasons this is happening? (Choose two.)

  A. Closed mode is restricting the collection of the attributes prior to authentication.
  B. The HTTP probe is malfunctioning due to closed mode being enabled.
  C. The SNMP probe is not enabled.
  D. NetFlow is not enable on the switch, so the attributes will not be collected.
  E. The switch is collecting the attributes via RADIUS but the probes are not sending them.
  A. Closed mode is restricting the collection of the attributes prior to authentication.
  E. The switch is collecting the attributes via RADIUS but the probes are not sending them.

• Question 249:

  Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

  A. MSCHAPv1
  B. PAP
  C. EAP
  D. CHAP
  E. MSCHAPV2
  C. EAP
  E. MSCHAPV2

• Question 250:

  A network administrator must configure Cisco ISE Personas in the company to share session information via syslog. Which Cisco ISE personas must be added to syslog receivers to accomplish this goal?

  A. admin
  B. policy services
  C. monitor
  D. pxGrid
  C. monitor