[Aug-2022] Cisco 300-715 Exam: Basic Questions With Answers
New 2022 Realistic Free Cisco 300-715 Exam Dump Questions and Answer
NEW QUESTION 57
Which use case validates a change of authorization?
- A. An endpoint profiling policy is changed for authorization policy.
- B. An authenticated, wired EAP-capable endpoint is discovered
- C. Endpoints are created through device registration for the guests
- D. An endpoint that is disconnected from the network is discovered
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html
NEW QUESTION 58
What is the condition that a Cisco ISE authorization policy cannot match?
- A. posture
- B. custom
- C. company contact
- D. time
- E. device type
Answer: B
NEW QUESTION 59
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.
Answer:
Explanation:
Explanation
Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.
This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide
NEW QUESTION 60
An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network They have multiple vendors' firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this What should be done to enable this type of posture check?
- A. Use a compound condition to look for the Windows or Mac native firewall applications.
- B. Enable the default rewall condition to check for any vendor rewall application.
- C. Use the file registry condition to ensure that the firewal is installed and running appropriately.
- D. Enable the default application condition to identify the applications installed and validade the rewall app.
Answer: B
Explanation:
https://www.youtube.com/watch?v=6Kj8P8Hn7dY&t=109s&ab_channel=CiscoISE-IdentityServicesEngine
NEW QUESTION 61
An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened. From which Cisco ISE persona should this traffic be originating?
- A. administration
- B. monitoring
- C. authentication
- D. policy service
Answer: C
NEW QUESTION 62
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to auto switch port for authentication?
- A. dot1x system-auth-control
- B. enable bypass-MAC
- C. mab
- D. enable network-authentication
Answer: A
NEW QUESTION 63
What are the three default behaviors of Cisco ISE with respect to authentication, when a user connects to a switch that is configured for 802.1X, MAB, and WebAuth? (Choose three)
- A. Dot1x traffic uses internal users for retrieving identity.
- B. Unmatched traffic is allowed on the network.
- C. MAB traffic uses internal endpoints for retrieving identity.
- D. Dot1X traffic uses a user-defined identity store for retrieving identity.
- E. Unmatched traffic is dropped because of the Reject/Reject/Drop action that is configured under Options.
Answer: C,D,E
NEW QUESTION 64
Select and Place
Answer:
Explanation:
NEW QUESTION 65
What is the minimum certainty factor when creating a profiler policy?
- A. the maximum number that a predefined condition provides
- B. the maximum number that a device certainty factor must reach to become a member of the profile
- C. the minimum number that a device certainty factor must reach to become a member of the profile
- D. the minimum number that a predefined condition provides
Answer: C
Explanation:
Section: Profiler
NEW QUESTION 66
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles?
(Choose two.)
- A. ASA
- B. Firepower
- C. IOS
- D. Shell
- E. WLC
Answer: D,E
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide TACACS+ Profile TACACS+ profiles control the initial login session of the device administrator. A session refers to each individual authentication, authorization, or accounting request. A session authorization request to a network device elicits an ISE response. The response includes a token that is interpreted by the network device, which limits the commands that may be executed for the duration of a session. The authorization policy for a device administration access service can contain a single shell profile and multiple command sets. The TACACS+ profile definitions are split into two components:
* Common tasks
* Custom attributes
There are two views in the TACACS+ Profiles page (Work Centers > Device Administration > Policy Elements > Results > TACACS Profiles)-Task Attribute View and Raw View. Common tasks can be entered using the Task Attribute View and custom attributes can be created in the Task Attribute View as well as the Raw View.
The Common Tasks section allows you to select and configure the frequently used attributes for a profile. The attributes that are included here are those defined by the TACACS+ protocol draft specifications. However, the values can be used in the authorization of requests from other services. In the Task Attribute View, the ISE administrator can set the privileges that will be assigned to the device administrator. The common task types are:
* Shell
* WLC
* Nexus
* Generic
The Custom Attributes section allows you to configure additional attributes. It provides a list of attributes that are not recognized by the Common Tasks section. Each definition consists of the attribute name, an indication of whether the attribute is mandatory or optional, and the value for the attribute. In the Raw View, you can enter the mandatory attributes using a equal to (=) sign between the attribute name and its value and optional attributes are entered using an asterisk (*) between the attribute name and its value. The attributes entered in the Raw View are reflected in the Custom Attributes section in the Task Attribute View and vice versa. The Raw View is also used to copy paste the attribute list (for example, another product's attribute list) from the clipboard onto ISE. Custom attributes can be defined for nonshell services.
NEW QUESTION 67
An employee logs on to the My Devices portal and marks a currently on-boarded device as 'Lost'.
Which two actions occur within Cisco ISE as a result oí this action? (Choose two)
- A. The device access has been denied
- B. Certificates provisioned to the device are not revoked
- C. BYOD Registration status is updated to No
- D. The device status is updated to Stolen
- E. BYOD Registration status is updated to Unknown.
Answer: B,C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
NEW QUESTION 68
When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen What is causing this issue?
- A. The groups are present but need to be manually typed as conditions
- B. Cisco ISE's connection to the AD join point is failing
- C. Cisco ISE only sees the built-in groups, not user created ones
- D. The groups are not added to Cisco ISE under the AD join point
Answer: D
Explanation:
https://www.youtube.com/watch?v=0kuEZEo564s&ab_channel=CiscoISE-IdentityServicesEngine
NEW QUESTION 69
An organization is hosting a conference and must make guest accounts for several of the speakers attending.
The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?
- A. Create an authorization rule denying sponsored guest access.
- B. Create an authorization rule denying guest access.
- C. Navigate to the Sponsor Portal and suspend the guest accounts.
- D. Navigate to the Guest Portal and delete the guest accounts.
Answer: C
NEW QUESTION 70
How is policy services node redundancy achieved in a deployment?
- A. by enabling VIP
- B. by utilizing RADIUS server list on the NAD
- C. by deploying both primary and secondary node
- D. by creating a node group
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/Workflow/b_deployment_2_4.html
NEW QUESTION 71
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?
- A. MDM
- B. My devices
- C. BYOD
- D. Client provisioning
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
NEW QUESTION 72
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?
- A. EAP server
- B. supplicant
- C. authenticator
- D. client
Answer: B
Explanation:
https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).
NEW QUESTION 73
......
Certification Path for Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)
This exam will help you use SISE to:
- Gain leading-edge career skills for high-demand job roles and responsibilities focused on enterprise security
- Provide secure business and context-based access based on policies
- Centrally configure and manage profiler, posture, guest, authentication, and authorization services in a single web-based GUI console
- Earn 40 CE credits toward recertification
- Provide a streamlined experience for implementing and customizing guest network access
It has no pre-requisite.
Guaranteed Success in CCNP Security 300-715 Exam Dumps: https://www.examdumpsvce.com/300-715-valid-exam-dumps.html
300-715 Practice Test Engine: Try These 210 Exam Questions: https://drive.google.com/open?id=19aoeWlFEvsr2MDxIsoeX_n1pOQOL0pVk
