Cisco 300-715 Online Practice Questions and Exam Preparation

Cisco 300-715 Online Questions & Answers

• Question 51:

  In which two ways can users and endpoints be classified for TrustSec? (Choose Two.)

  A. VLAN
  B. SXP
  C. dynamic
  D. QoS
  E. SGACL
  A. VLAN
  E. SGACL

• Question 52:

  A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication.

  Which two commands must be entered to meet this requirement? (Choose two.)

  A. ip http secure-server
  B. ip http authentication
  C. ip http server
  D. ip http redirection
  E. ip http secure-authentication
  A. ip http secure-server
  C. ip http server

• Question 53:

  An organization wants to enable web-based guest access for both employees and visitors. The goal is to use a single portal for both user types.

  Which two authentication methods should be used to meet this requirement? (Choose two.)

  A. LDAP
  B. 802 1X
  C. Certificate-based
  D. LOCAL
  E. MAC based
  A. LDAP
  D. LOCAL

• Question 54:

  An administrator is trying to collect metadata information about the traffic going across the network to gam added visibility into the hosts. This Information will be used to create profiling policies for devices us mg Cisco ISE so that network access policies can be used.

  What must be done to accomplish this task?

  A. Configure the RADIUS profiling probe within Cisco ISE
  B. Configure NetFlow to be sent to me Cisco ISE appliance.
  C. Configure SNMP to be used with the Cisco ISE appliance
  D. Configure the DHCP probe within Cisco ISE
  B. Configure NetFlow to be sent to me Cisco ISE appliance.

• Question 55:

  Refer to the exhibit:

  

  Which command is typed within the CLI of a switch to view the troubleshooting output?

  A. show authentication sessions mac 000e.84af.59af details
  B. show authentication registrations
  C. show authentication interface gigabitethemet2/0/36
  D. show authentication sessions method
  A. show authentication sessions mac 000e.84af.59af details

• Question 56:

  What is a difference between RADIUS compared to TACACS+?

  A. RADIUS separates AAA. and TACACS+ combines authentication and authorization.
  B. RADIUS has multiprotocol support, and TACACS+ supports only IP
  C. RADIUS uses UDP ports 1812 and 1813. and TACACS+ uses UDP ports 1645 and 1646
  D. RADIUS encrypts passwords only, and TACACS+ encrypts all packets.
  D. RADIUS encrypts passwords only, and TACACS+ encrypts all packets.

  ---

  One key difference between RADIUS and TACACS+ lies in their encryption mechanisms and the scope of their encrypted data: RADIUS: 1. Encrypts only the password field in the packet. 2. The rest of the packet, including attributes such as usernames, accounting information, and authorization data, is sent in cleartext. 3. Uses UDP ports 1812 for authentication and 1813 for accounting (originally 1645 and 1646 for older implementations). 4. Primarily focuses on authentication and accounting, with limited control over authorization. TACACS+: 1. Encrypts the entire packet (except the header), ensuring that all sensitive data, including usernames and accounting information, is secure. 2. Uses TCP port 49, which provides reliable transmission and ensures packet delivery. 3. Separates authentication, authorization, and accounting (AAA) functions, offering granular control over each phase.

• Question 57:

  DRAG DROP

  A security engineer configures a Cisco Catalyst switch to use Cisco TrustSec. The engineer must define the PAC key to authenticate the switch to Cisco ISE. Drag and drop the commands from the left into sequence on the right. Not all options are used.

  Select and Place:

  

  

• Question 58:

  A network engineer must configure BYOD using Cisco ISE. In the deployment, the users must be able to submit CSR through the end devices. Which two features must be enabled to meet the requirement? (Choose two.)

  A. Define a certificate group tag.
  B. A new BYOD portal must be created.
  C. Add SuperAdmin account into portal admin group.
  D. Cisco ISE internal CA service must be enabled.
  E. A certificate provisioning portal must be configured.
  D. Cisco ISE internal CA service must be enabled.
  E. A certificate provisioning portal must be configured.

• Question 59:

  Which interface-level command is needed to turn on 802.1X authentication?

  A. dot1x pae authenticator
  B. dot1x system-auth-control
  C. authentication host-mode single-host
  D. aaa server radius dynamic-author
  A. dot1x pae authenticator

  ---

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/dot1x.html

• Question 60:

  What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

  A. updates
  B. remediation actions
  C. Client Provisioning portal
  D. conditions
  E. access policy
  B. remediation actions
  D. conditions