Home

Home / Cisco / 300-715

Question list

List of questions

Question 1

(0)

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

Question 2

(0)

What is a method for transporting security group tags throughout the network?

Question 3

(0)

Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE? (Choose two).

Question 4

(0)

Which profiling probe collects the user-agent string?

Question 5

(0)

Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

Question 6

(0)

Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

Question 7

(0)

Which three default endpoint identity groups does cisco ISE create? (Choose three)

Question 8

(0)

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

Question 9

(0)

Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

Question 10

(0)

Refer to the exhibit: Which command is typed within the CU of a switch to view the troubleshooting output?

Open VPLUS File

Convert VPLUS to PDF

Related questions

An administrator must block access to BYOD endpoints that were onboarded without a certificate and have been reported as stolen in the Cisco ISE My Devices Portal. Which condition must be used when configuring an authorization policy that sets DenyAccess permission?

Refer to the exhibit. An engineer is configuring Cisco ISE for guest services They would like to have any unregistered guests redirected to the guest portal for authentication then have a CoA provide them with full access to the network that is segmented via firewalls Why is the given configuration failing to accomplish this goal?

DRAG DROP An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.

An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?

The security team identified a rogue endpoint with MAC address 00:46:91:02:28:4A attached to the network. Which action must security engineer take within Cisco ISE to effectively restrict network access for this endpoint?

DRAG DROP Drag and drop the configuration steps from the left into the sequence on the right to install two Cisco ISE nodes in a distributed deployment.

An engineer is configuring a posture policy for Windows 10 endpoints and wants to ensure that users in each AD group have different conditions to meet to be compliant. What must be done to accomplish this task?

Question 36 - 300-715 discussion

Report

In which two ways can users and endpoints be classified for TrustSec?

(Choose Two.)

A.

VLAN

B.

SXP

C.

dynamic

D.

QoS

E.

SGACL

Show Answer

asked 07/10/2024

Eric Zarghami

51 questions

User

Your answer: A B C D E

1 comments

Sorted by

0

User

Rita Maloney

Edited 20 days ago

Voted A, C

The process of assigning the SGT is called Classification. A SGT can be assigned dynamically as the result of an ISE authorization or it can be assigned via static methods that map the SGT to something, like a VLAN, subnet, IP Address, or port-profile. Dynamic classification is typically used to assign SGT to users because they are mobile. They could be connected from any location via wireless, wired, or vpn. On the other hand, servers tend not to move, so typically static classification methods are used.

Reply

Reply

Report