Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 371:

  An engineer must use Cisco ISE profiler services to provide network access to Cisco IP phones that cannot support 802.1X. Cisco ISE is configured to use the access switch device sensor information system-description and platform-type to profile Cisco IP phones and allow access. Which two protocols must be configured on the switch to complete the configuration? (Choose two.)

  A. SNMP
  B. EAPOL
  C. LLDP
  D. STP
  E. CDP
  C. LLDP
  E. CDP

• Question 372:

  Which controller option allows a user to switch from the provisioning SSID to the employee SSID after registration?

  A. User Idle Timeout
  B. AAA Override
  C. Fast SSID Change
  D. AP SSID Fallback
  C. Fast SSID Change

• Question 373:

  An engineer has been tasked with using Cisco ISE to restrict network access at the switchport level using 802.1X authentication. Users who fail 802.1X authentication should e redirected via web redirection and have their access restricted via an ACL. What must be configured in Cisco ISE to accomplish this task?

  A. an authorization profile
  B. an authorization rule
  C. an authentication policy
  D. an authentication profile
  A. an authorization profile

• Question 374:

  An engineer is creating a new authorization policy to give the endpoints access to VLAN 310 upon successful authentication. The administrator tests the 802.1X authentication for the endpoint and sees that it is authenticating successfully.

  What must be done to ensure that the endpoint is placed into the correct VLAN?

  A. Configure the switchport access vlan 310 command on the switch port.
  B. Ensure that the security group is not preventing the endpoint from being in VLAN 310.
  C. Add VLAN 310 in the common tasks of the authorization profile.
  D. Ensure that the endpoint is using the correct policy set.
  C. Add VLAN 310 in the common tasks of the authorization profile.

• Question 375:

  An engineer is configuring Cisco ISE for network device administration and has devices that support both protocols. What are two benefits of choosing TACACS+ over RADIUS for these devices? (Choose two.)

  A. TACACS+ uses secure EAP-TLS while RADIUS does not.
  B. TACACS+ is FIPS compliant while RADIUS is not.
  C. TACACS+ encrypts the entire payload being sent while RADIUS only encrypts the password.
  D. TACACS+ is designed for network access control while RADIUS is designed for role-based access.
  E. TACACS+ provides the ability to authorize specific commands while RADIUS does not.
  C. TACACS+ encrypts the entire payload being sent while RADIUS only encrypts the password.
  E. TACACS+ provides the ability to authorize specific commands while RADIUS does not.

• Question 376:

  A Cisco ISE administrator is setting up Central Web Authentication to be used for user endpoint authentication. The client cannot reach the guest portal to log in and gain access, but DNS is functioning properly and the guest portal is enabled. What else must be configured to gain access?

  A. Allow port TCP/8443 on the firewall.
  B. Configure HTTP to HTTPS redirection.
  C. Configure the guest portal to listen on TCP/8443.
  D. Allow redirection from any client IP range.
  A. Allow port TCP/8443 on the firewall.

• Question 377:

  An engineer must configure posture updates. The task is to ensure the latest set of predefined checks and operating system information is updated. The checks must take place regularly. Where in the Cisco ISE interface would the engineer make the necessary changes to the compliance module?

  A. Administration > System > Settings > Updates > Posture
  B. Administration > System > Settings > Updates > Schedule
  C. Administration > System > Settings > Posture > Updates
  D. Administration > System > Settings > Posture > Updates > Schedule
  C. Administration > System > Settings > Posture > Updates

• Question 378:

  A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices Where in the Layer 2 frame should this be verified?

  A. CMD filed
  B. 802.1Q filed
  C. Payload
  D. 802.1 AE header
  A. CMD filed

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/dam/global/en_ca/assets/ciscoconnect/2014/pdfs/policy_defined_segme ntation_with_trustsec_rob_bleeker.pdf (slide 25)

• Question 379:

  A network administrator wants to use dynamic VLAN assignment from Cisco ISE. Which option must be configured on the switch to support this?

  A. AAA authentication
  B. VTP
  C. DTP
  D. AAA authorization
  D. AAA authorization

• Question 380:

  A security engineer has a new TrustSec projct and must create a few static security group tag classifications as proof of concept. Which two classifications must the engineer configure? (Choose two.)

  A. switch ID
  B. MAC address
  C. VLAN
  D. user ID
  E. interface
  C. VLAN
  E. interface