Implementing and Configuring Cisco Identity Services Engine (300-715) Free Practice Test

Question 1

An engineer is configuring a new Cisco ISE node. The Device Admin service must run on this node to handle authentication requests for network-device access through TACACS+. Which persona must be enabled on this node to perform this function?

A. pxGrid

B. Administration

C. Monitoring

D. Policy Service

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A network engineer must configure a centralized Cisco ISE solution for wireless guest access with users in different time zones. The guest account activation time must be independent of the user's time zone, and the guest account must be enabled automatically when the user self-registers on the guest portal. Which option in the time profile settings must be selected to meet the requirement?

A. Select From First Login from the Account Type drop-down list.

B. Set the Minimum Account Duration to 10 days.

C. Select From Creation Date from the Account Type drop-down list.

D. Set the Duration Hours to 24:00.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which three default endpoint identity groups does cisco ISE create? (Choose three)

A. profiled

B. blacklist

C. Unknown

D. whitelist

E. end point

Correct Answer: A,B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

A. SNMP version

B. profile

C. shared secret

D. certificate

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

A. Enable Device Admin Service

B. Server Sequence

C. Device Administration License

D. Command Sets

E. External TACACS Servers

Correct Answer: A,C

Question 6

What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

A. EAP-TLS secures the exchange of credentials, while EAP-MS-CHAPv2 does not.

B. EAP-TLS uses a device certificate for authentication to enhance security, while EAP-MS-CHAPv2 does not.

C. EAP-TLS uses multiple forms of authentication, while EAP-MS-CHAPv2 only uses one.

D. EAP-TLS uses a username and password for authentication to enhance security, while EAP-MS- CHAPv2 does not.

Correct Answer: B

Question 7

Which two services must the administrator enable on the Cisco ISE deployment to ensure that the endpoint with MAC address 05:27:81:68:04:CA is authenticated, profiled, and added to the appropriate endpoint identity group? (Choose two.)

A. Session

B. Profiling

C. RADIUS

D. TACACS+

E. Posture

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles?
(Choose two.)

A. Firepower

B. IOS

C. WLC

D. Shell

E. ASA

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

What is a valid status of an endpoint attribute during the device registration process?

A. pending

B. unknown

C. block listed

D. DenyAccess

Correct Answer: A

Question 10

A network administrator notices that after a company-wide shut down, many users cannot connect their laptops to the corporate SSID. What must be done to permit access in a timely manner?

A. Connect this system as a guest user and then redirect the web auth protocol to log in to the network.

B. Add a certificate issue from the CA server, revoke the expired certificate, and add the new certificate in system.

C. Allow authentication for expired certificates within the EAP-TLS section under the allowed protocols.

D. Authenticate the user ' s system to the secondary Cisco ISE node and move this user to the primary with the renewed certificate.

Correct Answer: D

Question 11

An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

A. Session Termination

B. Session Reauthentication

C. Port Shutdown

D. Port Bounce

Correct Answer: B

Question 12

What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

A. State attribute

B. Class attribute

C. Event

D. Cisco-av-pair

Correct Answer: D

Question 13

An organization wants to split their Cisco ISE deployment to separate the device administration functionalities from the mam deployment. For this to work, the administrator must deregister any nodes that will become a part of the new deployment, but the button for this option is grayed out Which configuration is causing this behavior?

A. One of the nodes is the Primary PAN

B. All of the nodes participate in the PAN auto failover.

C. All of the nodes are actively being synched.

D. One of the nodes is an active PSN.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

Refer to the exhibit.

An engineer is configuring a client but cannot authenticate to Cisco ISE During troubleshooting, the show authentication sessions command was issued to display the authentication status of each port Which command gives additional information to help identify the problem with the authentication?

A. show authentication sessions output

B. show authentication sessions interface Gi1/0/1 details

C. show authentication sessions Interface Gil/0/1 output

D. show authentication sessions

Correct Answer: B

Welcome to TestSimulate

Cisco Implementing and Configuring Cisco Identity Services Engine (300-715) Free Practice Test