[UPDATED Dec-2023] Best Value Available Preparation Guide for 300-715 Exam
1 Full 300-715 Practice Test and 240 Unique Questions, Get it Now!
Understanding functional and technical aspects of Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Web Auth and guest services
The following will be discussed in CISCO 300-715 exam dumps:
- Closed mode
- Configure 802.1X phasing deployment
- Configure Cisco TrustSec
- Configure policies including authentication and authorization profiles
- Configure network access devices
Cisco 300-715 exam is a crucial certification for professionals seeking to gain proficiency in implementing and configuring the Cisco Identity Services Engine. It evaluates an individual's knowledge and skills in ISE architecture, implementation, configuration, and management. Individuals who pass 300-715 exam have demonstrated their ability to enforce access control policies, integrate with other security solutions, and provide secure network access for end-users.
NEW QUESTION # 52
An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?
- A. DNS probe
- B. NetFlow probe
- C. SNMP query probe
- D. DHCP probe
Answer: D
Explanation:
Explanation
http://www.network-node.com/blog/2016/1/2/ise-20-profiling
NEW QUESTION # 53
An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy. Which two components must be configured, in addition to Active Directory groups, to achieve this goat? (Choose two )
- A. Library Condition for External Identity. External Groups
- B. Identity Source Sequences
- C. Active Directory External Identity Sources
- D. LDAP External Identity Sources
Answer: A,C
Explanation:
E Library Condition for Identity Group: User Identity Group
NEW QUESTION # 54
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
- A. unknown
- B. Endpoint
- C. white list
- D. blacklist
- E. profiled
Answer: A
Explanation:
Explanation
If you do not have a matching profiling policy, you can assign an unknown profiling policy. The endpoint is therefore profiled as Unknown. The endpoint that does not match any profile is grouped within the Unknown identity group. The endpoint profiled to the Unknown profile requires that you create a profile with an attribute or a set of attributes collected for that endpoint.
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html
NEW QUESTION # 55
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE. What must be configured within Cisco ISE to accomplish this goal?
- A. Add the root certificate authority to the trust store and enable it for authentication.
- B. Create an SCEP profile to link Cisco ISE with the root certificate authority.
- C. Add an OCSP profile and configure the root certificate authority as secondary.
- D. Create a certificate signing request and have the root certificate authority sign it.
Answer: B
Explanation:
Ref:https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine-software/116068-configure-product-00.html
NEW QUESTION # 56
Which personas can a Cisco ISE node assume'?
- A. policy service, gatekeeping, and monitoring
- B. administration, policy service, and monitoring
- C. administration, policy service, gatekeeping
- D. administration, monitoring, and gatekeeping
Answer: B
Explanation:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html The persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.
NEW QUESTION # 57
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2. Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? {Choose two.)
- A. DNS probe
- B. RADIUS probe
- C. SNMP query probe
- D. NetFlow probe
- E. DHCP SPAN probe
Answer: B,C
Explanation:
https://ciscocustomer.lookbookhq.com/iseguidedjourney/ISE-profiling-design
NEW QUESTION # 58
An adminístrator is migrating device administration access to Cisco ISE from the legacy TACACS+ solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs. Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?
- A. Define the command privileges for levels 2-5 in Cisco ISE
- B. Enable the privilege levels in the IOS devices.
- C. Define the command privileges for levels 2-5 in the IOS devices
- D. Enable the privilege levels in Cisco ISE
Answer: B
Explanation:
https://learningnetwork.cisco.com/s/blogs/a0D3i000002eeWTEAY/cisco-ios-privilege-levels
NEW QUESTION # 59 
Refer to the exhibit Which switch configuration change will allow only one voice and one data endpoint on each port?
- A. Mab to dot1x
- B. Auto to manual
- C. Multi-auth to multi-domain
- D. Multi-auth to single-auth
Answer: C
Explanation:
Explanation
https://community.cisco.com/t5/network-access-control/cisco-ise-multi-auth-or-multi-host/m-p/3750907
NEW QUESTION # 60
Drag the descriptions on the left onto the components of 802.1X on the right.
Answer:
Explanation:
NEW QUESTION # 61
An engineer is implementing network access control using Cisco ISE and needs to separate the traffic based on the network device ID and use the IOS device sensor capability. Which probe must be used to accomplish this task?
- A. HTTP probe
- B. NetFlow probe
- C. network scan probe
- D. RADIUS probe
Answer: A
NEW QUESTION # 62
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network.
Which node should be used to accomplish this task?
- A. policy service
- B. pxGrid
- C. primary policy administrator
- D. monitoring
Answer: A
Explanation:
Section: Profiler
NEW QUESTION # 63
What is a characteristic of the UDP protocol?
- A. UDP offers best-effort delivery
- B. UDP can detect when a server is slow
- C. UDP offers information about a non-existent server
- D. UDP can detect when a server is down.
Answer: A
Explanation:
https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service-radius/13838-10.html
NEW QUESTION # 64
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide Step 1 Choose Administration > System > Deployment.
The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click Edit.
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings
Step 5
Click Save to save the node configuration.
NEW QUESTION # 65
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)
- A. updating of endpoint dACL
- B. addition of endpoint to My Devices Portal
- C. endpoint profile transition from Apple-device to Apple-iPhone
- D. endpoint profile transition from Unknown to Windows10-Workstation
- E. endpoint marked as lost in My Devices Portal
Answer: C,D
Explanation:
Section: Profiler
NEW QUESTION # 66
Drag and Drop Question
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-
4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html Step 1 Choose Administration > System > Deployment.
The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click Edit.
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings tab.
Step 5
Click Save to save the node configuration.
NEW QUESTION # 67
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide Step 1 Choose Administration > System > Deployment.
The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click Edit.
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings tab.
Step 5
Click Save to save the node configuration.
NEW QUESTION # 68
Refer to the exhibit.
An organization recently implemented network device administration using Cisco ISE. Upon testing the ability to access all of the required devices, a user in the Cisco ISE group IT Admins is attempting to login to a device in their organization's finance department but is unable to. What is the problem?
- A. The authorization policy doesn't correctly grant them access to the finance devices.
- B. The finance location is not a condition in the policy set.
- C. The IT training rule is taking precedence over the IT Admins rule.
- D. The authorization conditions wrongly allow IT Admins group no access to finance devices.
Answer: B
NEW QUESTION # 69
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)
- A. Connection Type
- B. Redirect ACL
- C. Operating System
- D. iOS Settings
- E. Windows Settings
Answer: A,C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_g
NEW QUESTION # 70
An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network. What is causing this issue to occur?
- A. The switch port is configured with authentication open.
- B. The switch port is configured with authentication event server dead action authorize vlan.
- C. The authorization results for the endpoints include the Trusted security group tag.
- D. The authorization results for the endpoints include a dACL allowing access.
Answer: A
NEW QUESTION # 71
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?
- A. subject alternative name and the common name
- B. user-presented certificate and a certificate stored in Active Directory
- C. user-presented password hash and a hash stored in Active Directory
- D. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory
Answer: A
Explanation:
Explanation
Basic certificate checking does not require an identity source. If you want binary comparison checking for the certificates, you must select an identity source. If you select Active Directory as an identity source, subject and common name and subject alternative name (all values) can be used to look up a user.
https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_01110.html
NEW QUESTION # 72
An employee logs on to the My Devices portal and marks a currently on-boarded device as 'Lost'.
Which two actions occur within Cisco ISE as a result oi this action? (Choose two)
- A. The device status is updated to Stolen
- B. Certificates provisioned to the device are not revoked
- C. BYOD Registration status is updated to Unknown.
- D. The device access has been denied
- E. BYOD Registration status is updated to No
Answer: B,E
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
NEW QUESTION # 73
Refer to the exhibit.
Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802 1X authentications? (Choose two )
- A. Option A
- B. Option E
- C. Option B
- D. Option D
- E. Option C
Answer: A,E
NEW QUESTION # 74
Which profiling probe collects the user-agent string?
- A. DHCP
- B. AD
- C. NMAP
- D. HTTP
Answer: D
NEW QUESTION # 75
......
Get Instant Access to 300-715 Practice Exam Questions: https://braindumps.free4torrent.com/300-715-valid-dumps-torrent.html