Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 401:

  An administrator wants to configure network device administration and is trying to decide whether to use TACACS* or RADIUS. A reliable protocol must be used that can check command authorization

  Which protocol meets these requirements and why?

  A. TACACS+ because it runs over TCP
  B. RADIUS because it runs over UDP
  C. RADIUS because it runs over TCP.
  D. TACACS+ because it runs over UDP
  A. TACACS+ because it runs over TCP

• Question 402:

  A network engineer is configuring a Cisco WLC in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization policies. Which profiling mechanism must be configured in the Cisco WLC to accomplish this task?

  A. SNMP
  B. CDP
  C. DNS
  D. DHCP
  D. DHCP

• Question 403:

  Refer to the exhibit.

  

  In which scenario does this switch configuration apply?

  A. when allowing a hub with multiple clients connected
  B. when passing IP phone authentication
  C. when allowing multiple IP phones to be connected
  D. when preventing users with hypervisor
  A. when allowing a hub with multiple clients connected

  ---

  Explanation Explanation/Reference:https://www.linkedin.com/pulse/mac-authentication-bypass-priyanka-kumari#:~:text=Multi%2Dauthentication%20host%20mode%3A%20You,allows%20multiple%20sourc e%20MAC%20addresses.

• Question 404:

  An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?

  A. Install the Root CA and intermediate CA.
  B. Generate the CSR.
  C. Download the intermediate server certificate.
  D. Download the CA server certificate.
  B. Generate the CSR.

• Question 405:

  A client connects to a network and the authenticator device learns the MAC address 04:49:23:86:34:AB of this client. After the MAC address is learned, the 802.1 x authentication process begins on this port.

  Which ISE deployment mode restricts all traffic initially, applies a rule for access control if 802.1x authentication is successful, and can be configured to grant only limited access if 802.1 x authentication is unsuccessful?

  A. open mode
  B. monitor mode
  C. closed mode
  D. low-impact mode
  D. low-impact mode

  ---

  In closed mode, the port is initially in a restricted state, allowing no traffic until the 802.1x authentication process is completed successfully. Once the client passes authentication, access control rules are applied based on policies defined in Cisco ISE. These rules determine the level of access the authenticated client is granted.

• Question 406:

  An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed The logical profile Printers must be used in the authorization rule and the rule must be hit.

  What must be done to ensure that this configuration will be successful?

  A. Create a new logical profile for the new printer policy
  B. Enable the EndPoints:EndPointPolicy condition in the authorization policy.
  C. Add the new profiling policy to the logical profile Printers.
  D. Modify the profiler conditions to ensure that it goes into the correct logical profile
  B. Enable the EndPoints:EndPointPolicy condition in the authorization policy.

• Question 407:

  What is the minimum certainty factor when creating a profiler policy?

  A. the minimum number that a predefined condition provides
  B. the maximum number that a predefined condition provides
  C. the minimum number that a device certainty factor must reach to become a member of the profile
  D. the maximum number that a device certainty factor must reach to become a member of the profile
  C. the minimum number that a device certainty factor must reach to become a member of the profile

• Question 408:

  Refer to the exhibit.

  

  Which checkbox must be enabled to allow Cisco ISE to publish group membership information for active users that can be shared with Cisco Firepower devices?

  A. Enable Passive Identity Service
  B. Enable SXP Service
  C. Enable Device Admin Service
  D. pxGrid
  D. pxGrid

• Question 409:

  An endpoint with the MAC address 04:85:70:26:64:AB attempts to connect to the network. The security administrator wants to ensure that before authentication, only limited access is provided for services including DHCP and DNS Full network access is only granted upon successful 802.1X authentication. Which ISE deployment mode should the administrator configure to meet the requirements?

  A. low-impact mode
  B. closed mode
  C. monitor mode
  D. open mode
  A. low-impact mode

• Question 410:

  An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones The phones do not have the ability to authenticate via 802 1X

  Which command is needed on each switch port for authentication?

  A. dot1x system-auth-control
  B. enable bypass-mac
  C. enable network-authentication
  D. mab
  D. mab

  ---

  https://www.cisco.com/en/US/docs/ios-xml/ios/sec_usr_aaa/configuration/15-2mt/sec-config-mab.html