ExamGecko
Home Home / Cisco / 300-715

Cisco 300-715 Practice Test - Questions Answers, Page 25

Question list
Search
Search

Related questions











An engineer is working on a switch and must tag packets with SGT values such that it learns via SXP. Which command must be entered to meet this requirement?

A.

ip source guard

A.

ip source guard

Answers
B.

ip dhcp snooping

B.

ip dhcp snooping

Answers
C.

ip device tracking maximum

C.

ip device tracking maximum

Answers
D.

ip arp inspection

D.

ip arp inspection

Answers
Suggested answer: C

Explanation:

The ip device tracking maximum command is used to configure the maximum number of IP-to-SGT bindings that can be learned via SXP on a switch1. This command also enables the switch to tag packets with SGT values based on the bindings learned from SXP peers. The other commands are not related to SGT tagging or SXP learning.

An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an 'EAP-TLS authentication failed' message when moving between remote sites. Which configuration must be applied on Cisco ISE?

A.

Use a third-party certificate on the network device.

A.

Use a third-party certificate on the network device.

Answers
B.

Add the device to all PSN nodes in the deployment.

B.

Add the device to all PSN nodes in the deployment.

Answers
C.

Renew the expired certificate on one of the PSN.

C.

Renew the expired certificate on one of the PSN.

Answers
D.

Configure an authorization profile for the end users.

D.

Configure an authorization profile for the end users.

Answers
Suggested answer: B

Explanation:

When using separate PSNs for different sites, the network device must be added to all PSN nodes in the deployment, so that the device can communicate with the appropriate PSN based on the location of the user1. If the device is not added to all PSN nodes, the user may encounter an EAP-TLS authentication failure when moving between sites, as the device may not be able to reach the PSN that issued the certificate2. The other options are not relevant for this scenario, as they do not address the issue of PSN communication.

Total 242 questions
Go to page: of 25