Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 441:

  Due to a recent network incident, all access to network devices must be centrally logged and tracked in Cisco ISE. On which nodes must the Device Admin service be enabled?

  A. one PAN
  B. each PSN
  C. each PAN
  D. one PSN
  B. each PSN

• Question 442:

  A new Cisco ISE infrastructure is being built to provide network access control. If Cisco Discovery Protocol is used, what information is being gathered in relation to profiling with Cisco ISE?

  A. IdentityGroup
  B. device ID
  C. RADIUS session attributes D. DHCP session attributes
  B. device ID

• Question 443:

  Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

  A. large deployment with fully distributed nodes running all personas
  B. medium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs
  C. medium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs
  D. small deployment with one primary and one secondary node running all personas
  C. medium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs

• Question 444:

  An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so

  What must be done to accomplish this task?

  A. Configure an identity-based access list in Cisco ISE to restrict the users allowed to login
  B. Edit the sponsor portal to only accept members from the selected groups
  C. Modify the sponsor groups assigned to reflect the desired user groups
  D. Create an authorization rule using the Guest Flow condition to authorize the administrators
  C. Modify the sponsor groups assigned to reflect the desired user groups

• Question 445:

  What is the purpose of the ip http server command on a switch?

  A. It enables the https server for users for web authentication
  B. It enables MAB authentication on the switch
  C. It enables the switch to redirect users for web authentication.
  D. It enables dot1x authentication on the switch.
  C. It enables the switch to redirect users for web authentication.

• Question 446:

  An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

  A. policy service
  B. monitoring
  C. pxGrid
  D. primary policy administrator
  B. monitoring

• Question 447:

  What is a difference between TACACS+ and RADIUS in regards to encryption?

  A. TACACS+ encrypts only the password, whereas RADIUS encrypts the username and password.
  B. TACACS+ encrypts the username and password, whereas RADIUS encrypts only the password.
  C. TACACS+ encrypts the password, whereas RADIUS sends the entire packet in clear text.
  D. TACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.
  D. TACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.

  ---

  https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html

• Question 448:

  A security engineer must create an Antivirus remediation policy within Cisco ISE. Which two options can the engineer select in the new Antivirus remediation policy? (Choose two.)

  A. program installation path
  B. Antivirus vendor name
  C. uniform resource locator
  D. file to upload
  E. operating system
  B. Antivirus vendor name
  E. operating system

  ---

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_pos_pol.html#wp1655749