Cisco Implementing and Configuring Cisco Identity Services Engine - 300-715 Exam Practice Test
An administrator is configuring cisco ISE lo authenticate users logging into network devices using TACACS+ The administrator is not seeing any oi the authentication in the TACACS+ live logs. Which action ensures the users are able to log into the network devices?
Correct Answer: A
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
On which port does Cisco ISE present the Admin certificate for posture and client provisioning?
Correct Answer: A
Vote an answer
A network administrator is configuring client provisioning resource policies for client machines and must ensure that an agent pop-up is presented to the client when attempting to connect to the network Which configuration item needs to be added to allow for this ' ?
Correct Answer: D
Vote an answer
Wireless network users authenticate to Cisco ISE using 802.1X through a Cisco Catalyst switch. An engineer must create an updated configuration to assign a security group tag to the user ' s traffic using inline tagging to prevent unauthenticated users from accessing a restricted server. The configurations were performed:
* configured Cisco ISE as a Cisco TrustSec AAA server
* configured the switch as a RADIUS device in Cisco ISE
* configured the wireless LAN controller as a TrustSec device in Cisco ISE
* created a security group tog for the wireless users
* created a certificate authentication profile
# created an identity source sequence
* assigned an appropriate security group tag to the wireless users
* defined security group access control lists to specify an egress policy
* enforced the access control lists on the TrustSec policy matrix in Cisco ISE
* configured TrustSec on the switch
* configured TrustSec on the wireless LAN controller
Which two actions must be taken to complete the configuration? (Choose two.)
* configured Cisco ISE as a Cisco TrustSec AAA server
* configured the switch as a RADIUS device in Cisco ISE
* configured the wireless LAN controller as a TrustSec device in Cisco ISE
* created a security group tog for the wireless users
* created a certificate authentication profile
# created an identity source sequence
* assigned an appropriate security group tag to the wireless users
* defined security group access control lists to specify an egress policy
* enforced the access control lists on the TrustSec policy matrix in Cisco ISE
* configured TrustSec on the switch
* configured TrustSec on the wireless LAN controller
Which two actions must be taken to complete the configuration? (Choose two.)
Correct Answer: A,B
Vote an answer
What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An administrator replaced a PSN in the distributed Cisco ISE environment. When endpoints authenticate to it, the devices are not getting the right profiles or attributes and as a result, are not hitting the correct policies.
This was working correctly on the previous PSN. Which action must be taken to ensure the endpoints get identified?
This was working correctly on the previous PSN. Which action must be taken to ensure the endpoints get identified?
Correct Answer: D
Vote an answer
Which type of identity store allows for creating single-use access credentials in Cisco ISE?
Correct Answer: A
Vote an answer
There is a need within an organization for a new policy to be created in Cisco ISE. It must validate that a specific anti-virus application is not only installed, but running on a machine before it is allowed access to the network. Which posture condition should the administrator configure in order for this policy to work?
Correct Answer: D
Vote an answer
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
Correct Answer: D
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
A network administrator must configura endpoints using an 802 1X authentication method with EAP identity certificates that are provided by the Cisco ISE When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network Which EAP type must be configured by the network administrator to complete this task?
Correct Answer: B
Vote an answer
Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).
An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?
Correct Answer: B
Vote an answer