300-715 Exam - Implementing and Configuring Cisco Identity Services Engine (SISE)

NEW QUESTION 1
Refer to the exhibit.

Which command is typed within the CLI of a switch to view the troubleshooting output?

• A. show authentication sessions mac 000e.84af.59af details
• B. show authentication registrations
• C. show authentication interface gigabitethernet2/0/36
• D. show authentication sessions method

Answer: A

NEW QUESTION 2
If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

• A. Client Provisioning
• B. BYOD
• C. Guest
• D. Blacklist

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_010000.html

NEW QUESTION 3
What gives Cisco ISE an option to scan endpoints for vulnerabilities?

• A. authentication policy
• B. authorization profile
• C. authentication profile
• D. authorization policy

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010100.html

NEW QUESTION 4
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

• A. Keep track of guest user activities.
• B. Create and manage guest user accounts.
• C. Configure authorization settings for guest users.
• D. Authenticate guest users to Cisco ISE.

Answer: B

NEW QUESTION 5
Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)

• A. Redirect ACL
• B. Connection Type
• C. Operating System
• D. Windows Settings
• E. iOS Settings

Answer: CE

NEW QUESTION 6
Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

• A. MAB and if user not found, continue
• B. MAB and if authentication failed, continue
• C. Dot1x and if authentication failed, continue
• D. Dot1x and if user not found, continue

Answer: A

NEW QUESTION 7
Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

• A. qualys
• B. posture
• C. personas
• D. nexpose

Answer: B

NEW QUESTION 8
DRAG DROP
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 9
During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

• A. Microsoft App Store
• B. Cisco App Store
• C. Cisco ISE directly
• D. Native OTA functionality

Answer: C

Explanation:
Reference: https://ciscocustomer.lookbookhq.com/iseguidedjourney/BYOD-configuration

NEW QUESTION 10
What is the purpose of the ip http server
command on a switch?

• A. It enables the https server for users for web authentication.
• B. It enables dot1x authentication on the switch.
• C. It enables MAB authentication on the switch.
• D. It enables the switch to redirect users for web authentication.

Answer: C

NEW QUESTION 11
What is a method for transporting security group tags throughout the network?

• A. by embedding the security group tag in the 802.1Q header
• B. by the Security Group Tag Exchange Protocol
• C. by enabling 802.1AE on every network device
• D. by embedding the security group tag in the IP header

Answer: B

NEW QUESTION 12
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

• A. addition of endpoint to My Devices Portal
• B. endpoint marked as lost in My Devices Portal
• C. updating of endpoint dACL
• D. endpoint profile transition from Apple-device to Apple-iPhone
• E. endpoint profile transition from Unknown to Windows10-Workstation

Answer: DE

NEW QUESTION 13
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two.)

• A. access-challenge
• B. access-accept
• C. access-request
• D. access-reserved
• E. access-response

Answer: AB

NEW QUESTION 14
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

• A. Application Visibility and Control
• B. Supplicant Provisioning Wizard
• C. My Devices Portal
• D. Network Access Control

Answer: C

NEW QUESTION 15
Which two fields are available when creating an endpoint on the context visibility page of Cisco ISE? (Choose two.)

• A. Security Group Tag
• B. Endpoint Family
• C. Policy Assignment
• D. Identity Group Assignment
• E. IP Address

Answer: CD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_010101.html

NEW QUESTION 16
What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

• A. State attribute
• B. Class attribute
• C. Event
• D. Cisco-av-pair

Answer: D

Explanation:
Reference: https://community.cisco.com/t5/network-access-control/ise-airespace-acl-wlc-problem/td-p/2110491

NEW QUESTION 17
What is a requirement for Feed Service to work?

• A. TCP port 8080 must be opened between Cisco ISE and the feed server.
• B. Cisco ISE has access to an internal server to download feed update.
• C. Cisco ISE has a base license.
• D. Cisco ISE has Internet access to download feed update.

Answer: B

NEW QUESTION 18
Which two endpoint compliance statuses are possible? (Choose two.)

• A. compliant
• B. valid
• C. unknown
• D. known
• E. invalid

Answer: AC

NEW QUESTION 19
Which term refers to an endpoint agent that tries to join an 802.1X- enabled network?

• A. EAP server
• B. authenticator
• C. supplicant
• D. client

Answer: C

NEW QUESTION 20
Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

• A. DHCP server
• B. override Interface ACL
• C. static IP tunneling
• D. AAA override

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

NEW QUESTION 21
Which three default endpoint identity groups does Cisco ISE create? (Choose three.)

• A. endpoint
• B. unknown
• C. blacklist
• D. profiled
• E. whitelist

Answer: BCD

Explanation:
Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html#wp1203054

NEW QUESTION 22
......