Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 41:

  Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)

  A. multivendor integration
  B. VM hardware version 7+
  C. VM snapshots
  D. OVF support
  E. VM cold migration
  B. VM hardware version 7+
  D. OVF support

• Question 42:

  A user recently had their laptop stolen. IT has ordered a replacement device for the user and was able to obtain the MAC address of the device 04.57:47:34 35 0A from the vendor before it shipped. Which statement regarding adding MAC addresses to Cisco ISE is correct?

  A. MAC addresses can only be manually imported using a .csv file and the import option.
  B. MAC addresses can only be manually imported using the REST API.
  C. MAC addresses can only be allowed after the device has connected to the network.
  D. MAC addresses can be manually added using the + sign under Context Visibility > Endpoints.
  D. MAC addresses can be manually added using the + sign under Context Visibility > Endpoints.

• Question 43:

  Which two external identity stores are supported by Cisco ISE for password types? (Choose two.)

  A. TACACS+ Token Server
  B. RADIUS Token Server
  C. LDAP
  D. SQL
  E. OBDC
  B. RADIUS Token Server
  C. LDAP

• Question 44:

  What is a method for transporting security group tags throughout the network?

  A. by enabling 802.1AE on every network device
  B. by the Security Group Tag Exchange Protocol
  C. by embedding the security group tag in the IP header
  D. by embedding the security group tag in the 802.1Q header
  B. by the Security Group Tag Exchange Protocol

• Question 45:

  A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication Which two commands must be entered to meet this requirement? (Choose two)

  A. Ip http secure-authentication
  B. Ip http server
  C. Ip http redirection
  D. Ip http secure-server
  E. Ip http authentication
  B. Ip http server
  D. Ip http secure-server

  ---

  Explanation Explanation/Reference:https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3.2_0_se/multibook/configuration_guide/b_consolidated_config_guide_3850_chapter_0111001.html

• Question 46:

  Which two tasks must be completed when configuring the Cisco ISE BYOD Portal? (Choose two.)

  A. Enable policy services.
  B. Create endpoint identity groups.
  C. Customize device portal.
  D. Provision external identity sources.
  E. Deploy client provisioning portal.
  A. Enable policy services.
  B. Create endpoint identity groups.

• Question 47:

  An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

  A. Common Name and GUID
  B. MAC Address and GUID
  C. Distinguished Name
  D. Common Name
  B. MAC Address and GUID

  ---

  The engineer needs to select the option of MAC Address and GUID in the Subject Alternative Name field when configuring a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes.

• Question 48:

  How is policy services node redundancy achieved in a deployment?

  A. by enabling VIP
  B. by utilizing RADIUS server list on the NAD
  C. by creating a node group
  D. by deploying both primary and secondary node
  C. by creating a node group

  ---

  Explanation Explanation/Reference:https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/Workflow/b_deployment_2_4.html

• Question 49:

  An engineer is configuring cisco ISE and need to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

  A. Guest access
  B. Profiling
  C. Posture
  D. Client provisioning
  C. Posture

• Question 50:

  An administrator is editing a csv list of endpoints and wants to reprofile some of the devices indefinitely before importing the list into Cisco ISE. Which field and Boolean value must be changed for the devices before the list is reimported?

  A. Identity Group Assignment field and Static Assignment field set to the value FALSE
  B. Policy Assignment field and Static Assignment field set to the value TRUE
  C. Policy Assignment field and Static Assignment field set to the value FALSE
  D. Identity Group Assignment field and Static Assignment field set to the value TRUE
  C. Policy Assignment field and Static Assignment field set to the value FALSE