Summer Certification Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = getmirror

Home
Cisco
CCNP Security
300-715
Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Questions and Answers

Pass the Cisco CCNP Security 300-715 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam 300-715 Premium Access

View all detail and faqs for the 300-715 exam

Go to Exam

818 Students Passed

96% Average Score

93% Same Questions

Viewing page 5 out of 10 pages

Viewing questions 41-50 out of questions

Questions # 41:

An engineer is configuring a posture policy for Windows 10 endpoints and wants to ensure that users in each AD group have different conditions to meet to be compliant. What must be done to accomplish this task?

Options:

identify The users groups needed for different policies and create service conditions to map each one to its posture requirement

Configure a simple condition for each AD group and use it in the posture policy for each use case

Use the authorization policy within the policy set to group each AD group with their respective posture policy

Change the posture requirements to use an AD group lor each use case then use those requirements in the posture policy

Answer

Questions # 42:

Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

Question # 42

Options:

Answer

Answer:

Explanation

https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011.html

Step 1

Choose Administration > System > Deployment.

The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.

Step 2

Check the check box next to the current node, and click Edit.

Step 3

Click Make Primary to configure your Primary PAN.

Step 4

Enter data on the General Settings tab.

Step 5

Click Save to save the node configuration.

Questions # 43:

What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

Options:

pass

reject

drop

continue

Answer

Explanation

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

Questions # 44:

An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.

Question # 44

Options:

Answer

Answer:

Questions # 45:

How is policy services node redundancy achieved in a deployment?

Options:

by enabling VIP

by utilizing RADIUS server list on the NAD

by creating a node group

by deploying both primary and secondary node

Answer

Questions # 46:

A network administrator adds network access devices to Cisco ISE. After a security breach, the management team mandates that all network devices must comply with certain standards. All network devices must authenticate through Cisco ISE. Some devices use nondefault CoA ports.

What must be configured in Cisco ISE?

Options:

Network device profile with a port specified

Network access manager with a port specified

Network device group with a port specified

Network device with a port specified

Answer

Questions # 47:

A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?

Options:

Configure the sponsor group to increase the number of logins.

Use a custom portal to increase the number of logins

Modify the guest type to increase the number of maximum devices

Create an Adaptive Network Control policy to increase the number of devices

Answer

Explanation

https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_admin_guide_27/b_ise_admin_guide_27_chapter_01111.html.xml

Questions # 48:

A network administrator is setting up wireless guest access and has been unsuccessful in testing client access. The endpoint is able to connect to the SSID but is unable to grant access to the guest network through the guest portal. What must be done to identify the problem?

Options:

Use context visibility to verify posture status.

Use the endpoint ID to execute a session trace.

Use the identity group to validate the authorization rules.

Use traceroute to ensure connectivity.

Answer

Explanation

https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/b_ise_admin_guide_sample_chapter_011001.html#concept_87916A77E8774545B36D0BB422429596

Questions # 49:

Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node'?

Options:

radius-server timeout

session-timeout

idle-timeout

termination-action

Answer

Questions # 50:

Question # 50

Refer to the exhibit. An engineer must configure BYOD in Cisco ISE. A single SSID must be used to allow BYOD devices to connect to the network. These configurations have been performed on Wireless LAN Controller already:

RADIUS server

BYOD-Dot1x SSID

Which two configurations must be done in Cisco ISE to meet the requirement? (Choose two.)