300-715 Exam Questions

What is an advantage of TACACS+ versus RADIUS authentication when reviewing reports in Cisco ISE?

What is a difference between RADIUS versus TACACS+ with regards to packet encryption?

Drag and Drop Question A network engineer must add a Cisco switch named HQ-IDF100 to Cisco ISE for TACACS+ device administration with a shared secret of PASSWORD1 and an IP address...

What is the default port used by Cisco ISE for NetFlow version 9 probe?

An engineer must create and sign a new certificate for all the portals in a Cisco ISE environment of a company. The company reports that wildcard certificates are blocked in the en...

Which media type must be used for zero-touch provisioning on a Cisco ISE hardware appliance?

Drag and Drop Question Drag and drop the CLI commands from the bottom onto the boxes in the code to enable 802.1x authentication and MAB on the same interface of a Cisco switch. No...

An administrator must authenticate Cisco Secure Client users using a secure token against an LDAP server to grant wireless network access in a Cisco ISE deployment. These configura...

Drag and Drop Question An engineer must configure Cisco TrustSec in Cisco ISE. The engineer completes the Active Directory integration but must create a security group. Drag and dr...

An administrator must change the authentication method from local accounts to SAMIL for wireless guest users in a Cisco ISE deployment. Using the SAML protocol, the guest portal mu...

An engineer is configuring a Sponsor portal in Cisco ISE. The authentication flow must go to an external source that uses Kerberos. Which type of external database must be used to...

An engineer must change the message that appears when a device is added to blocklist in Cisco ISE. The new message needs to contain static and dynamic content. These configurations...

An administrator is editing a csv list of endpoints and wants to reprofile some of the devices indefinitely before importing the list into Cisco ISE. Which field and Boolean value...

An administrator must restrict access to the IP address of an application based on the browser version of the endpoint. Cisco ISE profiling services and quest portal access must be...

An engineer is performing a bulk import of printer endpoints into a Cisco ISE local database by using LDAP. Which LDAP field must be configured to ensure that devices are not profi...

What is used by the CA to issue a certificate to an endpoint?

An engineer is deploying a new Cisco ISE environment for a company. The company wants the deployment to use TACACS+. The engineer verifies that Cisco ISE has a Device Administratio...

A company is deploying new Cisco switches on a local network. The network engineer must configure TACACS+ between the switches and Cisco ISE. What configuration value is mandatory...

An engineer must deploy device administration using Cisco ISE. Each department requires its own groups and privileges within Cisco ISE, and some departments only need access to spe...