Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 431:

  An administrator is configuring RADIUS on a Cisco switch with a key set to Cisc403012128 but is receiving the error "Authentication failed: 22040 Wrong password or invalid shared secret. "

  What must be done to address this issue?

  A. Add the network device as a NAD inside Cisco ISE using the existing key.
  B. Configure the key on the Cisco ISE instead of the Cisco switch.
  C. Use a key that is between eight and ten characters.
  D. Validate that the key is correct on both the Cisco switch as well as Cisco ISE.
  D. Validate that the key is correct on both the Cisco switch as well as Cisco ISE.

• Question 432:

  What does MAB leverage a MAC address for?

  A. Calling-Station-ID
  B. password
  C. cisco-av-pair
  D. username
  D. username

• Question 433:

  A company is attempting to improve their BYOD policies and restrict access based on certain criteria

  The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

  A. static group assignment
  B. IP address
  C. device registration status
  D. MAC address
  A. static group assignment

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html#ID1353

• Question 434:

  What is a restriction of a standalone Cisco ISE node deployment?

  A. Only the Policy Service persona can be disabled on the node.
  B. The domain name of the node cannot be changed after installation.
  C. Personas are enabled by default and cannot be edited on the node.
  D. The hostname of the node cannot be changed after installation.
  C. Personas are enabled by default and cannot be edited on the node.

  ---

  After you install a Cisco ISE node, all the default services provided by the Administration, Policy Service, and Monitoring personas run on it. This node is in a standalone state. You must log in to the Admin portal of the Cisco ISE node to configure it. You cannot edit the personas or services of a standalone Cisco ISE node. You can, however, edit the personas and services of the primary and secondary Cisco ISE nodes. You must first configure a primary ISE node and then register secondary ISE nodes to the primary ISE node. https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010.html

• Question 435:

  An engineer wants to ease the management of endpoint identity groups from the Cisco ISE GUI. From the Identity Management menu in Cisco ISE, the engineer must be able to list the endpoint identity groups with a name that contains Android. Which task must the engineer perform?

  A. Create and save a quick filter with name equals Android as the criteria.
  B. Create an identity group named Android and set the parent group to profiled.
  C. Create and save an advanced filter with name equals Android as the criteria.
  D. Create an identity group named Android and populate the group with Android devices only.
  C. Create and save an advanced filter with name equals Android as the criteria.

• Question 436:

  An engineer is creating a new TACACS* command set and cannot use any show commands after togging into the device with this command set authorization. Which configuration is causing this issue?

  

  A. Question marks are not allowed as wildcards for command sets.
  B. The command set is allowing all commands that are not in the command list
  C. The wildcard command listed is in the wrong format
  D. The command set is working like an ACL and denying every command.
  C. The wildcard command listed is in the wrong format

• Question 437:

  An engineer builds a five-node distributed Cisco ISE deployment. The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas.

  Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 438:

  What is a valid status of an endpoint attribute during the device registration process?

  A. block listed
  B. pending
  C. unknown
  D. DenyAccess
  B. pending

  ---

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_new_chapter_0100011.html

• Question 439:

  Refer to the exhibit. An engineer observes that users sometimes find their device after the device is declared stolen and block listed in Cisco ISE.

  What must be selected from the My Devices portal in Cisco ISE to allow the users to reconnect their devices to the network?

  

  A. Register
  B. Reinstate
  C. Lost
  D. Stolen
  B. Reinstate

• Question 440:

  An engineer is configuring Central Web Authentication in Cisco ISE to provide guest access. When an authentication rule is configured in the Default Policy Set for the Wired_MAB or Wireless_MAB conditions, what must be selected for the "if user not found" setting?

  A. ACCEPT
  B. DROP
  C. REJECT
  D. CONTINUE
  D. CONTINUE

  ---

  Selecting CONTINUE as the "if user not found" setting means that if the user is not found or authenticated by the MAB (MAC Authentication Bypass) process, the authentication flow will continue to the next rule or policy in the sequence. This allows for further authentication methods or conditions to be evaluated, such as web authentication for guest access. The other options, ACCEPT (option A), DROP (option B), and REJECT (option C), do not provide the desired behavior in this context. ACCEPT would immediately grant access, which is not appropriate if the user is not found. DROP would block or terminate the connection, and REJECT would reject the connection outright. Both DROP and REJECT options would prevent further evaluation of subsequent rules or policies, potentially denying guest access. Therefore, the correct choice is CONTINUE to allow the authentication flow to proceed.