Summer Sale Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: buysanta

Exact2Pass Menu

Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE)

Last Update 13 hours ago Total Questions : 322

The Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) content is now fully updated, with all current exam questions added 13 hours ago. Deciding to include 300-715 practice exam questions in your study plan goes far beyond basic test preparation.

You'll find that our 300-715 exam questions frequently feature detailed scenarios and practical problem-solving exercises that directly mirror industry challenges. Engaging with these 300-715 sample sets allows you to effectively manage your time and pace yourself, giving you the ability to finish any Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) practice test comfortably within the allotted time.

Question # 71

An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network. What is causing this issue to occur?

A.

The switch port is configured with authentication event server dead action authorize vlan.

B.

The authorization results for the endpoints include a dACL allowing access.

C.

The authorization results for the endpoints include the Trusted security group tag.

D.

The switch port is configured with authentication open.

Question # 72

What gives Cisco ISE an option to scan endpoints for vulnerabilities?

A.

authorization policy

B.

authentication policy

C.

authentication profile

D.

authorization profile

Question # 73

An engineer must use Cisco ISE profiler services to provide network access to Cisco IP phones that cannot support 802.1X. Cisco ISE is configured to use the access switch device sensor information — system-description and platform-type — to profile Cisco IP phones and allow access.

Which two protocols must be configured on the switch to complete the configuration? (Choose two.)

A.

LLDP

B.

CDP

C.

EAPOL

D.

SNMP

E.

STP

Question # 74

A network security administrator wants to integrate Cisco ISE with Active Directory. Which configuration action must the security administrator take to accomplish the task?

A.

Remove Cisco ISE user account from the domain.

B.

Remove the ISE machine account from the domain.

C.

Join Cisco ISE to the Active Directory domain.

D.

Search Active Directory to see if admin user account exists.

Question # 75

A security engineer configures a Cisco Catalyst switch to use Cisco TrustSec. The engineer must define the PAC key to authenticate the switch to Cisco IISE. Drag and drop the commands from the left into sequence on the right. Not all options are used.

Question # 76

Refer to the exhibit.

An engineer must configure the guest access settings in Cisco ISE. These configurations have already been performed:

• Configured the Wireless LAN Controller and added it as a network device in Cisco ISE.

• Created an endpoint identity group and a self-registered guest type.

• Configured SMTP and the registration form to send credentials by email.

Which two types of profiles must be configured next in Cisco ISE to meet the requirement? (Choose two.)

A.

An authorization profile to allow internet access

B.

An authorization profile to redirect users to the guest portal

C.

An authorization profile to redirect users to the sponsor portal

D.

An authentication profile to allow access to the guest portal

E.

An authentication profile to allow internet access

Question # 77

What is the Microsoft security policy recommendation (or fast user switching in Cisco ISE?

A.

Disable BYOD posture agent.

B.

Enable fast user switching.

C.

Disable fast user switching.

D.

Enable Cisco Secure Client posture agent.

Question # 78

Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)

A.

multivendor integration

B.

VM hardware version 7+

C.

VM snapshots

D.

OVF support

E.

VM cold migration

Question # 79

A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10 minutes, it will be disconnected. Which task must be configured in order to meet this requirement?

A.

session timeout

B.

idle time

C.

monitor

D.

set attribute as

Question # 80

An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

A.

NetFlow probe

B.

DNS probe

C.

DHCP probe

D.

SNMP query probe

Go to page: