What does the dot1x system-auth-control command do?

causes a network access switch not to track 802.1x sessions

enables 802.1x on a network access device interface

causes a network access switch to track 802.1x sessions

Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

show authentication sessions output

show authentication sessions interface Gi 1/0/x

show authentication sessions interface Gi1/0/x output

Which personas can a Cisco ISE node assume'?

administration, policy service, and monitoring

policy service, gatekeeping, and monitoring

administration, policy service, and monitoring

administration, policy service, gatekeeping

administration, monitoring, and gatekeeping

What is a characteristic of the UDP protocol?

UDP offers best-effort delivery

UDP can detect when a server is down.

UDP offers best-effort delivery

UDP can detect when a server is slow

UDP offers information about a non-existent server

Which are two characteristics of TACACS+? (Choose two)

It separates authorization and authentication functions.

It combines authorization and authentication functions.

It separates authorization and authentication functions.

What is the minimum certainty factor when creating a profiler policy?

the minimum number that a device certainty factor must reach to become a member of the profile

the minimum number that a predefined condition provides

the maximum number that a predefined condition provides

the minimum number that a device certainty factor must reach to become a member of the profile

the maximum number that a device certainty factor must reach to become a member of the profile

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

Create and manage guest user accounts

Keep track of guest user activities

Configure authorization settings for guest users

Create and manage guest user accounts

Authenticate guest users to Cisco ISE

Which interface-level command is needed to turn on 802 1X authentication?

authentication host-mode single-host

aaa server radius dynamic-author

Which permission is common to the Active Directory Join and Leave operations?

Search Active Directory to see if a Cisco ISE machine account already ex.sts.

Create a Cisco ISE machine account in the domain if the machine account does not already exist

Remove the Cisco ISE machine account from the domain.

Set attributes on the Cisco ISE machine account

Search Active Directory to see if a Cisco ISE machine account already ex.sts.

Which use case validates a change of authorization?

An endpoint profiling policy is changed for authorization policy.

An authenticated, wired EAP-capable endpoint is discovered

An endpoint profiling policy is changed for authorization policy.

An endpoint that is disconnected from the network is discovered

Endpoints are created through device registration for the guests

A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?

cts role-based policy priority-static

An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. Which action should accomplish this task?

Create the redirect ACL on the WLC and add it to the Cisco ISE policy.

Create the redirect ACL on the WLC and add it to the WLC policy

Create the redirect ACL on the WLC and add it to the Cisco ISE policy.

Create the redirect ACL on Cisco ISE and add it to the WLC policy

Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy

An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port. Which command should be used to accomplish this task?

permit tcp any any eq <port number>

Refer to the exhibit. A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server Which two commands should be run to complete the configuration? (Choose two)

radius server vsa sand authentication

radius-server attribute 8 include-in-access-req

aaa authorization auth-proxy default group radius

radius server vsa sand authentication

radius-server attribute 8 include-in-access-req

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

The device queries the internal identity store

The Cisco ISE server queries the external identity store.

The device queries the internal identity store

The Cisco ISE server queries the internal identity store

The device queries the external identity store

The Cisco ISE server queries the external identity store.

The device queries the Cisco ISE authorization server

When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network. Why should the engineer configure MAB in this situation?

The devices in the network do not have a supplicant.

The Cisco switches only support MAB.

MAB provides the strongest form of authentication available.

The devices in the network do not have a supplicant.

MAB provides user authentication.

An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

authentication port-control auto

aaa authentication dot1x default group radius

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

Authentication is redirected to the internal identity source.

Authentication is redirected to the external identity source.

Cisco 300-715 Practice Test 2 - Free Online Exam Questions 41-80

What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?

MAB

profiling

posture

central web authentication

Comment (0)

Cisco 300-715 Practice Test 2

Question

Cisco 300-715 Practice Tests

Practice Tests