300-715 Online Practice Questions and Answers

How is policy services node redundancy achieved in a deployment?

A. by enabling VIP

B. by utilizing RADIUS server list on the NAD

C. by creating a node group

D. by deploying both primary and secondary node

What are two requirements of generating a single signing in Cisco ISE by using a certificate provisioning portal, without generating a certificate request? (Choose two )

A. Location the CSV file for the device MAC

B. Select the certificate template

C. Choose the hashing method

D. Enter the common name

E. Enter the IP address of the device

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

A. The primary node restarts

B. The secondary node restarts.

C. The primary node becomes standalone

D. Both nodes restart.

Which port does cisco ISE use for native supplicant provisioning of a windows computer?

A. TCP/UDP 8905

B. TCP 8443

C. TCP/UDP 8909

D. TCP 443

What does MAB stand for?

A. MAC Address Binding

B. MAC Authorization Binding

C. MAC Authorization Bypass

D. MAC Authentication Bypass

An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?

A. Create an authorization rule denying sponsored guest access.

B. Navigate to the Guest Portal and delete the guest accounts.

C. Create an authorization rule denying guest access.

D. Navigate to the Sponsor Portal and suspend the guest accounts.

While configuring Cisco TrustSec on Cisco IOS devices the engineer must set the CTS device ID and password in order for the devices to authenticate with each other. However after this is complete the devices are not able to property authenticate

What issue would cause this to happen even if the device ID and passwords are correct?

A. The device aliases are not matching

B. The 5GT mappings have not been defined

C. The devices are missing the configuration cts credentials trustsec verify 1

D. EAP-FAST is not enabled

An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

A. Anyconnect network visibility module

B. Anyconnect compliance module

C. AnyConnectProfile.xml file

D. AnyConnectProfile.xsd file

E. Anyconnect agent image

A user recently had their laptop stolen. IT has ordered a replacement device for the user and was able to obtain the MAC address of the device 04.57:47:34 35 0A from the vendor before it shipped. Which statement regarding adding MAC addresses to Cisco ISE is correct?

A. MAC addresses can only be manually imported using a .csv file and the import option.

B. MAC addresses can only be manually imported using the REST API.

C. MAC addresses can only be allowed after the device has connected to the network.

D. MAC addresses can be manually added using the + sign under Context Visibility > Endpoints.

DRAG DROP

Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

Select and Place: