Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 301:

  Which two Cisco ISE deployment models require two nodes configured with dedicated PAN and MnT personas? (Choose two.)

  A. three PSN nodes
  B. seven PSN nodes with one PxGrid node
  C. five PSN nodes with one PxGrid node
  D. two PSN nodes with one PxGrid node
  E. six PSN nodes
  A. three PSN nodes
  D. two PSN nodes with one PxGrid node

• Question 302:

  When configuring Active Directory groups, an administrator is attempting to retrieve a group that has a name that is ambiguous with another group. What must be done so that the correct group is returned?

  A. Use the SID as the identifier for the group.
  B. Configure MAB to utilize one group, and 802 1xto utilize the conflicting group.
  C. Select both groups, and use a TCT pointer to identity the appropriate one.
  D. Utilize MIB entries to identify the desired group.
  A. Use the SID as the identifier for the group.

• Question 303:

  What is a requirement for Feed Service to work?

  A. TCP port 3080 must be opened between Cisco ISE and the feed server
  B. Cisco ISE has a base license.
  C. Cisco ISE has access to an internal server to download feed update D. Cisco ISE has Internet access to download feed update
  D

• Question 304:

  An administrator needs to add a new third party network device to be used with Cisco ISE for Guest and BYOD authorizations. Which two features must be configured under Network Device Profile to achieve this? (Choose two.)

  A. TACACS
  B. SNMP community
  C. CoA Type
  D. dACL
  E. URL Redirect
  C. CoA Type
  E. URL Redirect

• Question 305:

  If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

  A. UDP/TCP 389
  B. UDP123
  C. TCP 21
  D. TCP 445
  E. TCP 88
  C. TCP 21

• Question 306:

  Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

  A. session timeout
  B. idle-timeout
  C. radius-server timeout
  D. termination-action
  B. idle-timeout

  ---

  When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the inactivity timer expires, the switch removes the authenticated session. The inactivity timer for MAB can be statically configured on the switch port, or it can be dynamically assigned using the RADIUS Idle-Timeout attribute

• Question 307:

  An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is available for configuration of policies at all times. What is the requirement to enable this feature?

  A. one primary admin and one secondary admin node in the deployment
  B. one policy services node and one secondary admin node
  C. one policy services node and one monitoring and troubleshooting node
  D. one primary admin node and one monitoring and troubleshooting node
  A. one primary admin and one secondary admin node in the deployment

• Question 308:

  An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two)

  A. TELNET 23
  B. LDAP 389
  C. HTTP 80
  D. HTTPS 443
  E. MSRPC 445
  B. LDAP 389
  E. MSRPC 445

• Question 309:

  DRAG DROP

  An engineer must configure a new user on the local internal database of the Cisco ISE so that the user has access to the resources and services on the Cisco ISE network.

  Drag and drop the configuration steps from the left into the sequence on the right.

  Select and Place:

  

  

• Question 310:

  If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

  A. Client Provisioning
  B. Guest
  C. BYOD
  D. Blacklist
  D. Blacklist

  ---

  https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/BYOD_Design_Guide/Managing_Lost_or_Stolen_Device.html#90273 The Blacklist identity group is system generated and maintained by ISE to prevent access to lost or stolen devices. In this design guide, two authorization profiles are used to enforce the permissions for wireless and wired devices within the Blacklist: 1. Blackhole WiFi Access 2. Blackhole Wired Access