Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 421:

  DRAG DROP

  Refer to the exhibit.

  

  An engineer must configure Cisco ISE to be used as the TACACS+ server for any administrator that signs into the router. Users must be able to change their Telnet password through the TACACS+ server.

  Drag and drop the configuration steps from the left into the sequence on the right.

  Select and Place:

  

  

• Question 422:

  A network administrator is currently using Cisco ISE to authenticate devices and users via 802 1X There is now a need to also authorize devices and users using EAP-TLS.

  Which two additional components must be configured in Cisco ISE to accomplish this? (Choose two.)

  A. Network Device Group
  B. Serial Number attribute that maps to a CA Server
  C. Common Name attribute that maps to an identity store
  D. Certificate Authentication Profile
  E. EAP Authorization Profile
  D. Certificate Authentication Profile
  E. EAP Authorization Profile

• Question 423:

  Which of these is not a method to obtain Cisco ISE profiling data?

  A. RADIUS
  B. HTTP
  C. SNMP query
  D. active scans
  E. Netflow
  F. DNS
  D. active scans

• Question 424:

  A network engineer is configuring a portal on Cisco ISE for employees. Employees must use this portal when registering personal devices with native supplicants. For onboarding devices connected with Cisco switches and Cisco wireless LAN controllers, the internal CA must be used. Which portal type must the engineer configure?

  A. Personal Device portal
  B. Client Provisioning portal
  C. Bring Your Own Device portal
  D. My Devices portal
  C. Bring Your Own Device portal

• Question 425:

  An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to connect to the network. Which port-control option must the engineer configure?

  A. pae-disabled
  B. auto
  C. force-authorized
  D. force-unauthorized
  C. force-authorized

• Question 426:

  Using the SAML protocol, an administrator must configure the Cisco ISE Sponsor portal to authenticate users with an external Microsoft Active Directory Federation Services server. The configurations were performed:

  1.

  created a new SAML identity provider profile in Cisco ISE

  2.

  exported the service provider information

  3.

  configured all the required Active Directory Federation Services configurations

  4.

  imported the Active Directory Federation Services metadata

  5.

  configured groups in the new SAML identity provider profile

  6.

  added attributes to the new SAML identity provider profile

  7.

  configured Advanced Settings in the new SAML identity provider profile

  Which two actors must be taken to complete the configuration? (Choose two.)

  A. Configure the Sponsor portal HTTPS port for Active Directory Federation Services integration
  B. Configure an identity source sequence in the Sponsor portal
  C. Allow Kerberos single sign-on on the Sponsor portal
  D. Customize the Sponsor portal pages for integration with Active Directory Federation Services
  E. Add SAML identity provider groups in Sponsor Group Members
  B. Configure an identity source sequence in the Sponsor portal
  E. Add SAML identity provider groups in Sponsor Group Members

• Question 427:

  An engineer is working with a distributed deployment of cisco ise and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

  A. Policy service
  B. Monitoring
  C. Primary policy administrator
  D. PxGrid
  C. Primary policy administrator

  ---

  The question is asking for configuring the probes. You cannot configure from a Policy Service Node. All configuration is done via the Policy Admin Node (PAN). C is the correct answer

• Question 428:

  An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

  A. Anyconnect network visibility module
  B. Anyconnect compliance module
  C. AnyConnectProfile.xml file
  D. AnyConnectProfile.xsd file
  E. Anyconnect agent image
  B. Anyconnect compliance module
  E. Anyconnect agent image

• Question 429:

  An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?

  A. Create an authorization rule denying sponsored guest access.
  B. Navigate to the Guest Portal and delete the guest accounts.
  C. Create an authorization rule denying guest access.
  D. Navigate to the Sponsor Portal and suspend the guest accounts.
  D. Navigate to the Sponsor Portal and suspend the guest accounts.

• Question 430:

  Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two )

  A. Policy Assignment
  B. Endpoint Family
  C. Identity Group Assignment
  D. Security Group Tag
  E. IP Address
  A. Policy Assignment
  C. Identity Group Assignment