Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 411:

  A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA Which action does the CoA perform?

  A. It terminates the client session
  B. It applies the downloadable ACL provided in the CoA
  C. It applies new permissions provided in the CoA to the client session.
  D. It triggers the NAD to reauthenticate the client
  D. It triggers the NAD to reauthenticate the client

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.html https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/113362-config-web-auth-ise-00.html

• Question 412:

  There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must be done to accomplish this goal?

  A. Enter the MAC address in the correct Endpoint Identity Group.
  B. Enter the MAC address in the correct Logical Profile.
  C. Enter the IP address in the correct Logical Profile.
  D. Enter the IP address in the correct Endpoint Identity Group.
  A. Enter the MAC address in the correct Endpoint Identity Group.

• Question 413:

  An administrator needs to allow guest devices to connect to a private network without requiring usernames and passwords. Which two features must be configured to allow for this? (Choose two.)

  A. hotspot guest portal
  B. device registration WebAuth
  C. central WebAuth
  D. local WebAuth
  E. self-registered guest portal
  A. hotspot guest portal
  B. device registration WebAuth

• Question 414:

  A network engineer must configure a policy rule to check the endpoint. The policy must ensure disk encryption is enabled and the appropriate antivirus software version is installed. Which configuration must the engineer apply to the rule?

  A. dictionary compound condition
  B. compound posture condition
  C. simple posture condition
  D. dictionary simple condition
  B. compound posture condition

• Question 415:

  In a Cisco ISE split deployment model, which load is split between the nodes?

  A. AAA
  B. network admission
  C. log collection
  D. device admission
  A. AAA

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26.pdf

• Question 416:

  An administrator is configuring the Native Supplicant Profile to be used with the Cisco ISE posture agents and needs to test the connection using wired devices to determine which profile settings are available. Which two configuration settings should be used to accomplish this task? (Choose two.)

  A. authentication mode
  B. proxy host/IP
  C. certificate template
  D. security
  E. allowed protocol
  C. certificate template
  E. allowed protocol

• Question 417:

  Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?

  A. distributed
  B. dispersed
  C. two-node
  D. hybrid
  C. two-node

• Question 418:

  What does a fully distributed Cisco ISE deployment include?

  A. PAN and PSN on the same node while MnTs are on their own dedicated nodes.
  B. PAN and MnT on the same node while PSNs are on their own dedicated nodes.
  C. All Cisco ISE personas on their own dedicated nodes.
  D. All Cisco ISE personas are sharing the same node.
  C. All Cisco ISE personas on their own dedicated nodes.

  ---

  Explanation Explanation/Reference:CCNP Security Identity Management SISE 300-715 Official Cert Guide, Chapter 6, Page 117, Figure 6-4. In a fully distributed deployment each persona is on it's own dedicated node. This is the only deployment model that allows you to scale beyond the 5 PSNs. https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_setup_cisco_ise.html

• Question 419:

  In which two ways can users and endpoints be classified for TrustSec?

  (Choose Two.)

  A. VLAN
  B. SXP
  C. dynamic
  D. QoS
  E. SGACL
  A. VLAN
  C. dynamic

• Question 420:

  Which type of identity store allows for creating single-use access credentials in Cisco ISE?

  A. OpenLDAP
  B. Local
  C. PKI
  D. RSA SecurID
  D. RSA SecurID

  ---

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html