Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Practice Questions

Question # 21

An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed The logical profile Printers must be used in the authorization rule and the rule must be hit. What must be done to ensure that this configuration will be successful^

Options:

A.  

Create a new logical profile for the new printer policy

B.  

Enable the EndPoints:EndPointPolicy condition in the authorization policy.

C.  

Add the new profiling policy to the logical profile Printers.

D.  

Modify the profiler conditions to ensure that it goes into the correct logical profile

Discussion 0
Question # 22

An engineer is configuring Cisco ISE policies to support MAB for devices that do not have 802.1X capabilities. The engineer is configuring new endpoint identity groups as conditions to be used in the AuthZ policies, but noticed that the endpoints are not hitting the correct policies. What must be done in order to get the devices into the right policies?

Options:

A.  

Manually add the MAC addresses of the devices to endpoint ID groups in the context visibility database.

B.  

Create an AuthZ policy to identify Unknown devices and provide partial network access prior to profiling.

C.  

Add an identity policy to dynamically add the IP address of the devices to their endpoint identity groups.

D.  

Identify the non 802.1X supported device types and create custom profiles for them to profile into.

Discussion 0
Question # 23

Which media type must be used for zero-touch provisioning on a Cisco ISE hardware appliance?

Options:

A.  

Network

B.  

USB

C.  

CD/DVD

D.  

Virtual media

Discussion 0
Question # 24

An engineer is configuring a new Cisco ISE node. The Device Admin service must run on this node to handle authentication requests for network-device access through TACACS+. Which persona must be enabled on this node to perform this function?

Options:

A.  

Monitoring

B.  

Policy Service

C.  

Administration

D.  

pxGrid

Discussion 0
Question # 25

While configuring Cisco TrustSec on Cisco IOS devices the engineer must set the CTS device ID and password in order for the devices to authenticate with each other. However after this is complete the devices are not able to property authenticate What issue would cause this to happen even if the device ID and passwords are correct?

Options:

A.  

The device aliases are not matching

B.  

The 5GT mappings have not been defined

C.  

The devices are missing the configuration cts credentials trustsec verify 1

D.  

EAP-FAST is not enabled

Discussion 0
Question # 26

What is the Microsoft security policy recommendation (or fast user switching in Cisco ISE?

Options:

A.  

Disable BYOD posture agent.

B.  

Enable fast user switching.

C.  

Disable fast user switching.

D.  

Enable Cisco Secure Client posture agent.

Discussion 0
Question # 27

Refer to the exhibit.

Question # 27

An engineer must configure the guest access settings in Cisco IS

E.  

These configurations have already been performed:

• Configured the Wireless LAN Controller and added it as a network device in Cisco IS

E.  

• Created an endpoint identity group and a self-registered guest type.

• Configured SMTP and the registration form to send credentials by email.

Which two types of profiles must be configured next in Cisco ISE to meet the requirement? (Choose two.)

Options:

A.  

An authorization profile to allow internet access

B.  

An authorization profile to redirect users to the guest portal

C.  

An authorization profile to redirect users to the sponsor portal

D.  

An authentication profile to allow access to the guest portal

E.  

An authentication profile to allow internet access

Discussion 0
Question # 28

What is a requirement for Feed Service to work?

Options:

A.  

TCP port 3080 must be opened between Cisco ISE and the feed server

B.  

Cisco ISE has a base license.

C.  

Cisco ISE has access to an internal server to download feed update

D.  

Cisco ISE has Internet access to download feed update

Discussion 0
Question # 29

An organization wants to standardize the 802 1X configuration on their switches and remove static ACLs on the switch ports while allowing Cisco ISE to communicate to the switch what access to provide What must be configured to accomplish this task?

Options:

A.  

security group tag within the authorization policy

B.  

extended access-list on the switch for the client

C.  

port security on the switch based on the client ' s information

D.  

dynamic access list within the authorization profile

Discussion 0
Question # 30

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

Options:

A.  

DHCP server

B.  

static IP tunneling

C.  

override Interface ACL

D.  

AAA override

Discussion 0

300-715 PDF

300-715 PDF (Printable)
$54.25
$154.99

300-715 Testing Engine

300-715 PDF (Printable)
$59.5
$169.99

300-715 PDF + Testing Engine

300-715 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions