300-715 Exam Questions

An administrator must deploy the Cisco Secure Client posture agent to employee endpoints that access a wireless network by using URL redirection in Cisco ISE. The compliance module...

An administrator must configure Cisco ISE to authenticate the administrative superuser to manage a Cisco Adaptive Security Appliance firewall. The solution must meet the requiremen...

What is a primary function of RADIUS compared to TACACS?

Which two external identity stores are supported by Cisco ISE for password types? (Choose two.)

An engineer configures Cisco ISE and Cisco Catalyst switches to enforce Cisco TrustSec policies. The engineer must use a nondisruptive deployment approach for new devices by deploy...

Using the SAML protocol, an administrator must configure the Cisco ISE Sponsor portal to authenticate users with an external Microsoft Active Directory Federation Services server....

A network administrator must restrict sponsor account privileges for managing guest accounts on Cisco ISE for a new account that is being created. Sponsor groups currently exist fo...

An engineer must configure a posture policy with Cisco Temporal Agent workflow. Which two configurations must the engineer apply to meet the requirement? (Choose two.)

Drag and Drop Question Drag and drop the steps of the onboarding process from the left into the order they authenticate on the right. Not all options are used. Answer:

A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a join operation. Which action must the security administrator tak...

An engineer is deploying Cisco ISE in a network that contains an existing Cisco Secure Firewall ASA. The customer requested that Cisco TrustSec be configured so that Cisco ISE and...

Which component of the 802.1X authentication process provides the identity credentials and communicates using EAP at Layer 2?

An engineer is configuring a new Cisco ISE node. The Cisco ISE must make authorization decisions based on the threat and vulnerability attributes received from the threat and vulne...

An engineer is configuring a new Cisco ISE node. Context-sensitive information must be shared between the Cisco ISE and a Cisco ASA. Which persona must be enabled?

An engineer is deploying Cisco ISE into an existing wireless environment for a hospital. The requirement from the customer is that the WLC use Cisco ISE for Central Web Authenticat...

Refer to the exhibit. An engineer must configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network....

An engineer must provide network access using a Cisco ISE policy that matches the identity group of endpoints unrecognized by any Cisco ISE profilers and manually adds the endpoint...

An administrator must onboard MacOS endpoints that connect to Cisco switches using the BYOD portal in Cisco ISE. The authentication method must be configured to meet these requirem...

Which Cisco ISE feature enables administrators to enroll a certificate to an endpoint with MAC address 04:90:45:06:46:AA without the need for an external PKI?

An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occur...

An engineer is assigned to enhance security across the campus network. The task is to enable MAB across all access switches in the network. Which command must be entered on the swi...

An administrator must enable helpdesk users to view users' information on wireless LAN controllers in a Cisco ISE environment. The solution must meet these requirements: - Authenti...

What is a difference between RADIUS compared to TACACS+?

An administrator must configure Cisco ISE to send CoA requests to a Cisco switch using SNMP. These configurations were performed: - enabled SNMP on the switch - added the switch to...

Drag and Drop Question A security engineer configures a Cisco Catalyst switch to use Cisco TrustSec. The engineer must define the PAC key to authenticate the switch to Cisco ISE. D...

A network engineer is configuring a Cisco Wireless LAN Controller in order to find out more information about the devices that are connecting. This information must be sent to Cisc...

An engineer is configuring a new secure WLAN on a Cisco AireOS wireless LAN controller that has user authentication performed on a standalone Cisco ISE instance. The engineer wants...

A network administrator adds network access devices to Cisco ISE. After a security breach, the management team mandates that all network devices must comply with certain standards....

A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a leave operation. Which action on Active Directory is needed to m...

The Cisco Wireless LAN Controller and guest portal must be set up in Cisco ISE. These configurations were performed: - configured all the required Cisco Wireless LAN Controller con...

What is the Microsoft security policy recommendation for fast user switching in Cisco ISE?

An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Di...

A network engineer must define a Redirect ACL on a Cisco Wireless LAN Controller. The ACL must force unknown users to authenticate via a captive portal located on a Cisco ISE PSN o...

An administrator is deploying IOT connector with MAC address 11:22 33:44:55:AA that requires network access. New custom profiling policy must be configured in Cisco ISE in order to...

What is a difference between TACACS+ and RADIUS protocol traffic?

Refer to the exhibit. An engineer observes that users sometimes find their device after the device is declared stolen and block listed in Cisco ISE. What must be selected from the...

An engineer must use Cisco ISE to provide network access to endpoints that cannot support 802.1X. The endpoint MAC addresses must be allowlisted by configuring an endpoint identity...

Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)

An engineer must onboard secure Windows 11 laptops of directors on the BYOD portal by using Cisco ISE. Corporate security policies require the Cisco ISE internal CA to use an ECC c...

Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to th...

A network security administrator wants to integrate Cisco ISE with Active Directory. Which configuration action must the security administrator take to accomplish the task?

Drag and Drop Question An engineer must configure a new user on the local internal database of the Cisco ISE so that the user has access to the resources and services on the Cisco...

A Cisco ISE administrator must authenticate users against Microsoft Active Directory. The solution must meet these requirements: - Users and computers must be authenticated. - User...

An administrator is responsible for configuring network access for a temporary network printer. The administrator must only use the printer MAC address 50:40:16:89:0:AB for authent...

An engineer is deploying a new guest WLAN for a company. The company wants this WLAN to use a sponsored guest portal for secure guest access. The wireless LAN controller must direc...

Which default "guest type" is included with Cisco ISE?

An administrator must provide network access to legacy Windows endpoints with a specific device type and operating system version using Cisco ISE profiler services. The ISE profile...

On which port does Cisco ISE present the Admin certificate for posture and client provisioning?

Which action must be taken before configuring the Secure Client Agent profile when creating the Secure Client configuration for ISE posture services?

Drag and Drop Question Refer to the exhibit. An engineer must configure Cisco ISE to be used as the TACACS+ server for any administrator that signs into the router. Users must be a...