Sep-2022 Cisco 300-715 Actual Questions and Braindumps
300-715 Dumps To Pass Cisco Exam in 24 Hours - TroytecDumps
NEW QUESTION 95
An organization has a fully distributed Cisco ISE deployment When implementing probes, an administrator must scan for unknown endpoints to learn the IP-to-MAC address bindings. The scan is complete on one FPSN. but the information is not available on the others. What must be done to make the information available?
- A. Cisco ISE must be configured to learn the IP-MAC binding of unknown endpoints via RADIUS authentication, not via scanning
- B. Scanning must be initiated from the MnT node to centrally gather the information
- C. Cisco ISE must learn the IP-MAC binding of unknown endpoints via DHCP profiling, not via scanning
- D. Scanning must be initiated from the PSN that last authenticated the endpoint
Answer: C
NEW QUESTION 96
A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for one day When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest network after that period. Which configuration is causing this problem?
- A. The Guest Account Purge Policy is set to 15 days
- B. The Endpoint Purge Policy is set to 30 days for guest devices
- C. The RADIUS policy set for guest access is set to allow repeated authentication of the same device
- D. The length of access is set to 7 days in the Guest Portal Settings
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_01101.html#:~:text=Cisco%20ISE%2C%20by%20default%2C%20deletes,5000%20endpoints%20every%20three%20minutes.
NEW QUESTION 97
Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?
- A. Cisco AnyConnect NAM and Cisco Access Control Server
- B. Cisco Secure Services Client and Cisco Access Control Server
- C. Cisco AnyConnect NAM and Cisco Identity Service Engine
- D. Windows Native Supplicant and Cisco Identity Service Engine
Answer: C
NEW QUESTION 98
Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? ()
- A. hotspot
- B. posture
- C. BYOD
- D. new AD user 802 1X authentication
- E. guest AUP
Answer: B,D
NEW QUESTION 99
What are the three default behaviors of Cisco ISE with respect to authentication, when a user connects to a switch that is configured for 802.1X, MAB, and WebAuth? (Choose three)
- A. Unmatched traffic is allowed on the network.
- B. MAB traffic uses internal endpoints for retrieving identity.
- C. Dot1X traffic uses a user-defined identity store for retrieving identity.
- D. Unmatched traffic is dropped because of the Reject/Reject/Drop action that is configured under Options.
- E. Dot1x traffic uses internal users for retrieving identity.
Answer: B,C,D
NEW QUESTION 100
What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?
- A. continue
- B. reject
- C. pass
- D. drop
Answer: A
Explanation:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html
NEW QUESTION 101
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?
- A. supplicant
- B. client
- C. EAP server
- D. authenticator
Answer: A
Explanation:
Reference:
https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).
NEW QUESTION 102
What must match between Cisco ISE and the network access device to successfully authenticate endpoints?
- A. certificate
- B. SNMP version
- C. shared secret
- D. profile
Answer: C
Explanation:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html
NEW QUESTION 103
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide Step 1 Choose Administration > System > Deployment.
The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click Edit.
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings tab.
Step 5
Click Save to save the node configuration.
NEW QUESTION 104
What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two.)
- A. updates
- B. conditions
- C. access policy
- D. Client Provisioning portal
- E. remediation actions
Answer: B,E
Explanation:
Section: Endpoint Compliance
Explanation/Reference:
NEW QUESTION 105 
Refer to the exhibit. Which command is typed within the CLI of a switch to view the troubleshooting output?
- A. show authentication sessions mac 000e.84af.59af details
- B. show authentication interface gigabitethernet2/0/36
- C. show authentication sessions method
- D. show authentication registrations
Answer: A
Explanation:
Section: Policy Enforcement
NEW QUESTION 106
Refer to the exhibit:
Which command is typed within the CU of a switch to view the troubleshooting output?
- A. show authentication sessions mac 000e.84af.59af details
- B. show authentication sessions method
- C. show authentication registrations
- D. show authentication interface gigabitethemet2/0/36
Answer: A
NEW QUESTION 107
Which two values are compared by the binary comparison function in authentication that is based on Active Directory? (Choose Two)
- A. user-presented password hash and a hash stored in Active Directory
- B. user-presented certificate and a certificate stored in Active Directory
- C. subject alternative name and the common name
- D. MS-CHAFV2 provided machine credentials and credentials stored in Active Directory
Answer: C,D
Explanation:
Basic certificate checking does not require an identity source. If you want binary comparison checking for the certificates, you must select an identity source. If you select Active Directory as an identity source, subject and common name and subject alternative name (all values) can be used to look up a user.
https://www.cisco.com/c/en/us/td/docs/security/ise/1-
3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_01110.html
NEW QUESTION 108
In which scenario does Cisco ISE allocate an Advanced license?
- A. dynamic device profiling
- B. high availability Administrator nodes
- C. endpoint authorization using SGA enforcement
- D. guest services with dACL enforcement
Answer: C
NEW QUESTION 109
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?
- A. Monitoring and Troubleshooting
- B. Primary Administration
- C. Platform Exchange Grid
- D. policy Services
Answer: A
NEW QUESTION 110
An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?
- A. Port Shutdown
- B. Port Bounce
- C. Session Reauthentication
- D. Session Termination
Answer: C
NEW QUESTION 111
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)
- A. iOS Settings
- B. Windows Settings
- C. Operating System
- D. Connection Type
- E. Redirect ACL
Answer: A,C
Explanation:
Section: BYOD
NEW QUESTION 112
Which command displays all 802.1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?
- A. show authentication sessions interface Gi 1/0/x
- B. show authentication sessions interface Gi1/0/x output
- C. show authentication sessions output
- D. show authentication sessions
Answer: A
Explanation:
Section: Policy Enforcement
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-xe-3se-3850-cr-book/sec-s1- xe-3se-3850-cr-book_chapter_01.html#wp3404908137
NEW QUESTION 113
What must match between Cisco ISE and the network access device to successfully authenticate endpoints?
- A. certificate
- B. SNMP version
- C. shared secret
- D. profile
Answer: C
Explanation:
Section: Endpoint Compliance
Explanation/Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html
NEW QUESTION 114
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?
- A. user-presented password hash and a hash stored in Active Directory
- B. user-presented certificate and a certificate stored in Active Directory
- C. subject alternative name and the common name
- D. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory
Answer: C
Explanation:
Reference:
Basic certificate checking does not require an identity source. If you want binary comparison checking for the certificates, you must select an identity source. If you select Active Directory as an identity source, subject and common name and subject alternative name (all values) can be used to look up a user. https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_01110.html
NEW QUESTION 115
Refer to the exhibit:
Which command is typed within the CU of a switch to view the troubleshooting output?
- A. show authentication sessions mac 000e.84af.59af details
- B. show authentication sessions method
- C. show authentication registrations
- D. show authentication interface gigabitethemet2/0/36
Answer: A
NEW QUESTION 116
......
Download the Latest 300-715 Dump - 2022 300-715 Exam Question Bank: https://www.troytecdumps.com/300-715-troytec-exam-dumps.html
Buy Latest 300-715 Exam Q&A PDF - One Year Free Update: https://drive.google.com/open?id=1wdO65bS6M_VdNGUHhnAs1LHwfnYOo8LB