What is a method for transporting security group tags throughout the network?

by the Security Group Tag Exchange Protocol

by enabling 802.1AE on every network device

by the Security Group Tag Exchange Protocol

by embedding the security group tag in the IP header

by embedding the security group tag in the 802.1Q header

Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

Cisco AnyConnect NAM and Cisco Identity Service Engine

Cisco AnyConnect NAM and Cisco Access Control Server

Cisco Secure Services Client and Cisco Access Control Server

Windows Native Supplicant and Cisco Identity Service Engine

Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

subject alternative name and the common name

MS-CHAPv2 provided machine credentials and credentials stored in Active Directory

user-presented password hash and a hash stored in Active Directory

user-presented certificate and a certificate stored in Active Directory

Refer to the exhibit: Which command is typed within the CU of a switch to view the troubleshooting output?

show authentication sessions mac 000e.84af.59af details

show authentication registrations

show authentication interface gigabitethemet2/0/36

show authentication sessions method

How is policy services node redundancy achieved in a deployment?

by utilizing RADIUS server list on the NAD

by deploying both primary and secondary node

A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server.Which command is the user missing in the switch's configuration?

radius-server vsa send accounting

aaa accounting network default start-stop group radius

aaa accounting resource default start-stop group radius

aaa accounting exec default start-stop group radios

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two )

TACACS+ has command authorization, and RADIUS does not.

TACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

TACACS+ supports 802.1X, and RADIUS supports MAB

TACACS+ uses UDP, and RADIUS uses TCP

TACACS+ has command authorization, and RADIUS does not.

TACACS+ provides the service type, and RADIUS does not

TACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

Application Visibility and Control

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

The primary node becomes standalone

Which statement about configuring certificates for BYOD is true?

An endpoint certificate is mandatory for the Cisco ISE BYOD

An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment

The SAN field is populated with the end user name.

An endpoint certificate is mandatory for the Cisco ISE BYOD

The CN field is populated with the endpoint host name

Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

endpoint profile transition from Apple-Device to Apple-iPhone

endpoint profile transition from Unknown to Windows 10-Workstation

endpoint marked as lost in My Devices Portal

addition of endpoint to My Devices Portal

endpoint profile transition from Apple-Device to Apple-iPhone

endpoint profile transition from Unknown to Windows 10-Workstation

What is a requirement for Feed Service to work?

Cisco ISE has access to an internal server to download feed update

TCP port 3080 must be opened between Cisco ISE and the feed server

Cisco ISE has access to an internal server to download feed update

Cisco ISE has Internet access to download feed update

What is needed to configure wireless guest access on the network?

Captive Portal Bypass turned on

endpoint already profiled in ISE

valid user account in Active Directory

Captive Portal Bypass turned on

Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

MAB and if user not found, continue

MAB and if authentication failed, continue

Dot1x and if user not found, continue

Dot1x and if authentication failed, continue

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

new AD user 802 1X authentication

What is the purpose of the ip http server command on a switch?

It enables the switch to redirect users for web authentication.

It enables the https server for users for web authentication

It enables MAB authentication on the switch

It enables the switch to redirect users for web authentication.

It enables dot1x authentication on the switch.

What are two requirements of generating a single signing in Cisco ISE by using a certificate provisioning portal, without generating a certificate request? (Choose two )

Select the certificate template

Location the CSV file for the device MAC

Select the certificate template

Enter the IP address of the device

Cisco 300-715 Practice Test 1 - Free Online Exam Questions 1-40

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

A.

updates

B.

remediation actions

C.

Client Provisioning portal

D.

conditions

E.

access policy

Cisco 300-715 Practice Test 1

Question

Cisco 300-715 Practice Tests

Practice Tests