Pre-Winter Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 65pass65

Free Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Practice Questions

Question # 71

An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.

Question # 71

Options:

Discussion 0
Question # 72

An administrator is configuring a new profiling policy within Cisco ISE The organization has several endpoints that are the same device type and all have the same Block ID in their MAC address. The profiler does not currently have a profiling policy created to categorize these endpoints. therefore a custom profiling policy must be created Which condition must the administrator use in order to properly profile an ACME Al Connector endpoint for network access with MAC address < MAC ADDRESS > ?

Options:

A.  

MAC_OUI_STARTSWITH_ < MACADDRESS >

B.  

CDP_cdpCacheDevicelD_CONTAINS_ < MACADDRESS >

C.  

MAC_MACAddress_CONTAINS_ < MACADDRESS >

D.  

Radius Called Station-ID STARTSWITH < MACADDRESS >

Discussion 0
Question # 73

An engineer needs to configure a Cisco ISE server to issue a CoA for endpoints already authenticated to access the network. The CoA option must be enforced on a session, even if there are multiple active sessions on a port. What must be configured to accomplish this task?

Options:

A.  

the Reauth CoA option in the Cisco ISE system profiling settings enabled

B.  

an endpoint profiling policy with the No CoA option enabled

C.  

an endpoint profiling policy with the Port Bounce CoA option enabled

D.  

the Port Bounce CoA option in the Cisco ISE system profiling settings enabled

Discussion 0
Question # 74

An engineer is configuring 802.1X and wants it to be transparent from the users ' point of view. The implementation should provide open authentication on the switch ports while providing strong levels of security for non-authenticated devices. Which deployment mode should be used to achieve this?

Options:

A.  

closed

B.  

low-impact

C.  

open

D.  

high-impact

Discussion 0
Question # 75

An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

Options:

A.  

dot1x pae authenticator

B.  

dot1x system-auth-control

C.  

authentication port-control auto

D.  

aaa authentication dot1x default group radius

Discussion 0
Question # 76

An engineer must configure a new authorization policy in Cisco ISE for wireless users. The policy must match a specific SSID name and use standard RADIUS attributes. The Wireless LAN Controller is already configured. Which RADIUS attribute must be configured to meet the requirement?

Options:

A.  

Airespace:Airespace-Wlan-Id

B.  

RADIUS:Calling-Station-ID

C.  

Airespace:Airespace-SSID

D.  

RADIUS:Called-Station-ID

Discussion 0
Question # 77

Refer to the exhibit:

Question # 77

Which command is typed within the CU of a switch to view the troubleshooting output?

Options:

A.  

show authentication sessions mac 000e.84af.59af details

B.  

show authentication registrations

C.  

show authentication interface gigabitethemet2/0/36

D.  

show authentication sessions method

Discussion 0
Question # 78

An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers What must be done to accomplish this task?

Options:

A.  

Create a sponsor portal to allow guests to create accounts using their social media logins.

B.  

Create a sponsored guest portal and enable social media in the external identity sources.

C.  

Create a self-registered guest portal and enable the feature for social media logins

D.  

Create a hotspot portal and enable social media login for network access

Discussion 0
Question # 79

What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

Options:

A.  

SNMP version

B.  

shared secret

C.  

certificate

D.  

profile

Discussion 0
Question # 80

Which type of identity store allows for creating single-use access credentials in Cisco ISE?

Options:

A.  

OpenLDAP

B.  

Local

C.  

PKI

D.  

RSA SecurID

Discussion 0

300-715 PDF

300-715 PDF (Printable)
$54.25
$154.99

300-715 Testing Engine

300-715 PDF (Printable)
$59.5
$169.99

300-715 PDF + Testing Engine

300-715 PDF (Printable)
$74.55
$212.99

Free Exams Sample Questions