Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 331:

  Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

  A. MAB and if user not found, continue
  B. MAB and if authentication failed, continue
  C. Dot1x and if user not found, continue
  D. Dot1x and if authentication failed, continue
  A. MAB and if user not found, continue

• Question 332:

  A network engineer needs to deploy 802.1x using Cisco ISE in a wired network environment where thin clients download their system image upon bootup using PXE. For which mode must the switch ports be configured?

  A. closed
  B. restricted
  C. monitor
  D. low-impact
  D. low-impact

• Question 333:

  A network administrator is configuring client provisioning resource policies for client machines and must ensure that an agent pop-up is presented to the client when attempting to connect to the network. Which configuration item needs to be added to allow for this?

  A. a temporal agent that gets installed onto the system
  B. a remote posture agent proxying the network connection
  C. the client provisioning URL in the authorization policy
  D. an API connection back to the client
  C. the client provisioning URL in the authorization policy

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_configure_client_provisioning.html#ID1405 It is mandatory to include the client provisioning URL in authorization policy to enable the agent to popup in the client machines. This prevents request from any random clients and ensures that only clients with proper redirect URL can request for posture assessment.

• Question 334:

  What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

  A. EAP-TLS uses a username and password for authentication to enhance security, while EAP-MS- CHAPv2 does not.
  B. EAP-TLS secures the exchange of credentials, while EAP-MS-CHAPv2 does not.
  C. EAP-TLS uses a device certificate for authentication to enhance security, while EAP-MS-CHAPv2 does not.
  D. EAP-TLS uses multiple forms of authentication, while EAP-MS-CHAPv2 only uses one.
  C. EAP-TLS uses a device certificate for authentication to enhance security, while EAP-MS-CHAPv2 does not.

• Question 335:

  What is a difference between TACACS+ compared to RADIUS? (Choose two.)

  A. TACACS+ encrypts only the password, and RADIUS encrypts the entire packet payload.
  B. TACACS+ uses a connection-oriented transport, and RADIUS uses a connectionless transport.
  C. TACACS+ supports 802.1X network access control, and RADIUS supports only MAB.
  D. TACACS+ offers multiple protocol support, and RADIUS supports only IP traffic.
  B. TACACS+ uses a connection-oriented transport, and RADIUS uses a connectionless transport.
  D. TACACS+ offers multiple protocol support, and RADIUS supports only IP traffic.

• Question 336:

  A network engineer must enable a profiling probe. The profiling must take details through the Active Directory. Where in the Cisco ISE interface would the engineer enable the probe?

  A. Administration > Deployment > System > Profiling
  B. Policy > Deployment > System > Profiling
  C. Policy > Policy Elements > Profiling
  D. Administration > System > Deployment > Profiling
  D. Administration > System > Deployment > Profiling

• Question 337:

  DRAG DROP

  Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

  Select and Place:

  

  

  ---

  Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources

  Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.

  This persona evaluates the policies and makes all the decisions.

  Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on

  pxGrid = shares context-sensitive information from Cisco ISE to subscribers

  https://www.cisco.com/c/en/us/td/docs/security/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide_14_chapter_011.html#ID57

• Question 338:

  An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Secure Client for the agent configuration in a client provisioning policy? (Choose two.)

  A. SecureClientProtie.xsd file
  B. Secure Client compliance module
  C. Secure Client agent image
  D. SecureClientProfie.xml file
  E. Secure Client network visibility module
  B. Secure Client compliance module
  C. Secure Client agent image

• Question 339:

  An engineer is working on a switch and must tag packets with SGT values such that it learns via SXP. Which command must be entered to meet this requirement?

  A. ip source guard
  B. ip dhcp snooping
  C. ip device tracking maximum
  D. ip arp inspection
  C. ip device tracking maximum

  ---

  The ip device tracking maximum command is used to configure the maximum number of IP-to-SGT bindings that can be learned via SXP on a switch1. This command also enables the switch to tag packets with SGT values based on the bindings learned from SXP peers. The other commands are not related to SGT tagging or SXP learning.

• Question 340:

  What is a function of client provisioning?

  A. It ensures an application process is running on the endpoint.
  B. It checks a dictionary' attribute with a value.
  C. It ensures that endpoints receive the appropriate posture agents
  D. It checks the existence date and versions of the file on a client.
  C. It ensures that endpoints receive the appropriate posture agents

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010111.html