Read Online 300-715 Test Practice Test Questions Exam Dumps
Easily To Pass New 300-715 Premium Exam Updated [Jan 11, 2024]
NEW QUESTION # 127
Which two default endpoint identity groups does cisco ISE create? (Choose two )
- A. Unknown
- B. end point
- C. whitelist
- D. profiled
- E. blacklist
Answer: A,D,E
Explanation:
Default Endpoint Identity Groups Created for Endpoints Cisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, RegisteredDevices, and Unknown. In addition, it creates two more identity groups, such as Cisco-IP-Phone and Workstation, which are associated to the Profiled (parent) identity group. A parent group is the default identity group that exists in the system.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-
4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_010101.html#ID16
78
NEW QUESTION # 128
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide Step 1 Choose Administration > System The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings tab.
Step 5
Click Save to save the node configuration.
NEW QUESTION # 129
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
- A. Application Visibility and Control
- B. Network Access Control
- C. Supplicant Provisioning Wizard
- D. My Devices Portal
Answer: D
NEW QUESTION # 130
What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?
- A. The secondary node restarts.
- B. The primary node becomes standalone
- C. Both nodes restart.
- D. The primary node restarts
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/1-1-1/installation_guide/ise_install_guide/ise_deploy.html if your deployment has two nodes and you deregister the secondary node, both nodes in this primary-secondary pair are restarted. (The former primary and secondary nodes become standalone.)
NEW QUESTION # 131
An administrator replaced a PSN in the distributed Cisco ISE environment. When endpoints authenticate to it, the devices are not getting the right profiles or attributes and as a result, are not hitting the correct policies. This was working correctly on the previous PSN. Which action must be taken to ensure the endpoints get identified?
- A. Verify the shared secret used between the switch and the PSN.
- B. Verify that the profiling service is running on the new PSN.
- C. Verify that the authentication request the PSN is receiving is not malformed.
- D. Verify that the MnT node is tracking the session.
Answer: B
NEW QUESTION # 132
Refer to the exhibit:
Which command is typed within the CU of a switch to view the troubleshooting output?
- A. show authentication sessions mac 000e.84af.59af details
- B. show authentication sessions method
- C. show authentication interface gigabitethemet2/0/36
- D. show authentication registrations
Answer: A
NEW QUESTION # 133
What is a requirement for Feed Service to work?
- A. TCP port 3080 must be opened between Cisco ISE and the feed server
- B. Cisco ISE has a base license.
- C. Cisco ISE has Internet access to download feed update
- D. Cisco ISE has access to an internal server to download feed update
Answer: B
NEW QUESTION # 134
What are two differences between the RADIUS and TACACS+ protocols'? (Choose two.)
- A. TACACS+uses TCP port 49. whereas RADIUS uses UDP ports 1812 and 1813.
- B. RADIUS combines authentication and authorization, whereas TACACS+ does not
- C. RADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol
- D. RADIUS enables encryption of all the packets, whereas with TACACS+. only the password is encrypted.
- E. RADIUS offers multiprotocol support, whereas TACACS+ does not
Answer: A,B
NEW QUESTION # 135
If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?
- A. Guest
- B. Client Provisioning
- C. Blacklist
- D. BYOD
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access/ BY OD_Design_Guide/Managing_Lost_or_Stolen_Device.html#90273 The Blacklist identity group is system generated and maintained by ISE to prevent access to lost or stolen devices. In this design guide, two authorization profiles are used to enforce the permissions for wireless and wired devices within the Blacklist:
Blackhole WiFi Access
Blackhole Wired Access
NEW QUESTION # 136
An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network They have multiple vendors' firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this What should be done to enable this type of posture check?
- A. Enable the default rewall condition to check for any vendor rewall application.
- B. Use the file registry condition to ensure that the firewal is installed and running appropriately.
- C. Enable the default application condition to identify the applications installed and validade the rewall app.
- D. Use a compound condition to look for the Windows or Mac native firewall applications.
Answer: A
Explanation:
Explanation
https://www.youtube.com/watch?v=6Kj8P8Hn7dY&t=109s&ab_channel=CiscoISE-IdentityServicesEngine
NEW QUESTION # 137
Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?
- A. posture
- B. qualys
- C. personas
- D. nexpose
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010110.html Posture is a service in Cisco Identity Services Engine (Cisco ISE) that allows you to check the state, also known as posture, of all the endpoints that are connecting to a network for compliance with corporate security policies. This allows you to control clients to access protected areas of a network.
NEW QUESTION # 138
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?
- A. allow list
- B. profiled
- C. endpoint
- D. unknown
- E. block list
Answer: D
Explanation:
Section: Profiler
Explanation/Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html
NEW QUESTION # 139
Which two fields are available when creating an endpoint on the context visibility page of Cisco ISE? (Choose two.)
- A. Policy Assignment
- B. Security Group Tag
- C. IP Address
- D. Endpoint Family
- E. Identity Group Assignment
Answer: A,E
Explanation:
Section: Policy Enforcement
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/ b_ise_admin_guide_22_chapter_010101.html
NEW QUESTION # 140
An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?
- A. Create one shell profile and one command set.
- B. Create one shell profile and multiple command sets.
- C. Create multiple shell profiles and multiple command sets.
- D. Create multiple shell profiles and one command set
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html
https://www.youtube.com/watch?v=IlZwB71Szog&ab_channel=JasonMaynard
NEW QUESTION # 141
Refer to the exhibit:
Which command is typed within the CU of a switch to view the troubleshooting output?
- A. show authentication sessions mac 000e.84af.59af details
- B. show authentication sessions method
- C. show authentication interface gigabitethemet2/0/36
- D. show authentication registrations
Answer: A
NEW QUESTION # 142
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2. Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? {Choose two.)
- A. DHCP SPAN probe
- B. NetFlow probe
- C. DNS probe
- D. RADIUS probe
- E. SNMP query probe
Answer: D,E
NEW QUESTION # 143
A laptop was stolen and a network engineer added it to the block list endpoint identity group What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?
- A. Select DROP under If Auth fail within the authentication policy.
- B. Select DenyAccess within the authorization policy.
- C. Ensure that access to port 8444 is allowed within the ACL.
- D. Ensure that access to port 8443 is allowed within the ACL.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010000.html
NEW QUESTION # 144
Which two ports do network devices typically use for CoA? (Choose two )
- A. 0
- B. 1
- C. 2
- D. 3
- E. 4
Answer: A,B
NEW QUESTION # 145
An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirement complete this policy? (Choose two)
- A. access code control
- B. username expiration date
- C. gpassword expiration period
- D. active username limit
- E. minimum password length
Answer: C,E
NEW QUESTION # 146
Which two Cisco ISE deployment models require two nodes configured with dedicated PAN and MnT personas? (Choose two.)
- A. five PSN nodes with one PxGrid node
- B. six PSN nodes
- C. three PSN nodes
- D. two PSN nodes with one PxGrid node
- E. seven PSN nodes with one PxGrid node
Answer: A,D
NEW QUESTION # 147
......
Profiler: This domain evaluates the skills of the specialists in the processes, such as:
- Applying profiler services
- Implementing probes
- Setting endpoint identity administration
- Applying CoA
300-715 Certification All-in-One Exam Guide Jan-2024: https://www.troytecdumps.com/300-715-troytec-exam-dumps.html
Get Real 300-715 Exam Dumps [Jan-2024] Practice Tests: https://drive.google.com/open?id=1crgh_ce2inIBVAWLG-HGiG0dJX4prEQT