300-715 Exam Questions

An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs. An admin...

What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

What is a requirement for Feed Service to work?

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

What is a valid guest portal type?

What is needed to configure wireless guest access on the network?

The default Cisco ISE node configuration has which role or roles enabled by default?

What does MAB stand for?

What is the Cisco ISE default admin login name and password?

What is the condition that a Cisco ISE authorization policy cannot match?

Which statement is not correct about the Cisco ISE Monitoring node?

The profiling data from network access devices is sent to which Cisco ISE node?

Drag and Drop Question Drag the Cisco ISE node types from the left onto the appropriate purposes on the right. Answer:

Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

Which portal is used to customize the settings for a user to log in and download the compliance module?

Which term refers to an endpoint agent that tries to join an 802.1X-enabled network?

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two)

Which protocol must be allowed for a BYOD device to access the BYOD portal?

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that...

Which types of design are required in the Cisco ISE ATP program?

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

What are the three default behaviors of Cisco ISE with respect to authentication, when a user connects to a switch that is configured for 802.1X, MAB, and WebAuth? (Choose three)

Which statement is true?

In which scenario does Cisco ISE allocate an Advanced license?

Which Cisco ISE node does not support automatic failover?

Which scenario does not support Cisco ISE guest services?

By default, which traffic does an 802.IX-enabled switch allow before authentication?

What does MAB leverage a MAC address for?

Which three conditions can be used for posture checking? (Choose three.)

Which use case validates a change of authorization?

An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to authenticate via 802.1X. Which command i...

A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task...

An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT- REBOOT and SELECTING message types. Which probe should be used to accomplish this ta...

An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this...

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to...

Refer to the exhibit. A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server. Which two commands should be run to complete the configuration...

An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?

A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task?

An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirement comp...

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deplo...

In a Cisco ISE split deployment model, which load is split between the nodes?

An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this c...

Which two default endpoint identity groups does Cisco ISE create? (Choose two )

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two )

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity...

An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic. Which type of access list should be used for this configuration?