Cisco 300-715 Practice Exam Questions

Cisco 300-715 Sample Question Answers

Question # 1

An administrator must change the authentication method from local accounts to SAML for wireless guest users in a Cisco ISE deployment. Using SAML, the guest portal must authenticate employees through an external identity provider. These configurations were performed: • Created a secondary self-registered guest portal for SAML integration • Created a primary guest portal for wireless guest users • Configured all required settings on the SAML identity provider server • Imported the identity provider metadata into the Cisco ISE SAML identity provider profile Which two actions must be taken? (Choose two.)

A. Configure the SAML identity provider as the authentication method for the primary guest portal. 
B. Configure the Sponsor portal. 
C. Create a SAML identity provider in Cisco ISE. 
D. Configure the SAML identity provider as the authentication method for the secondary guest portal. 
E. Create employee accounts in the Sponsor portal. 

Show Answer

Question # 2

An administrator must authenticate Cisco Secure Client users by using a secure token against an LDAP server to grant wireless network access in a Cisco ISE deployment. These configurations have been performed: • Configured Microsoft Active Directory as an external identity source • Created an authentication policy • Created an authorization policy The administrator must create a Cisco Secure Client profile to complete the configuration. Which protocol must be implemented in the policy?

A. LEAP 
B. EAP-GTC 
C. MS-CHAPv2 
D. EAP-MD5 

Show Answer

Question # 3

The security engineer for a company has recently deployed Cisco ISE to perform centralized authentication of all network device logins using TACACS+ against the local AD domain. Some of the other network engineers are having a hard time remembering to enter their AD account password instead of the local admin password that they have used for years. The security engineer wants to change the password prompt to "Use Local AD Password:" as a way of providing a hint to the network engineers when logging in. Under which page in Cisco ISE would this change be made? 

A. Work Centers > Device Administration > Settings > Connection Settings 
B. Work Centers > Device Administration > Ext Id Sources > Advanced Settings 
C. The password prompt cannot be changed on a Cisco IOS device 
D. Work Centers > Device Administration > Network Resources > Network Devices 

Show Answer

Question # 4

Which media type must be used for zero-touch provisioning on a Cisco ISE hardware appliance?

A. Network 
B. USB 
C. CD/DVD 
D. Virtual media 

Show Answer

Question # 5

What is used by the Certificate Authority to issue a certificate to an endpoint?

A. Certificate Provisioning Portal 
B. Device network address 
C. Certificate template 
D. Device unique identifier 

Show Answer

Question # 6

An administrator must restrict access to the IP address of an application based on the browser version of the endpoint. Cisco ISE profiling services and guest portal access must be configured to capture the user-agent information of the endpoint from a Cisco switch using the Device Sensor feature. These configurations were performed: • Added the switch to Cisco ISE • Configured Device Sensor on the switch • Enabled Cisco ISE portal access • Configured the endpoint to connect to the Cisco ISE portal Which type of probe must be enabled next to complete the configuration? 

A. DHCP 
B. RADIUS
 C. SNMP 
D. NetFlow

Show Answer

Question # 7

A network engineer must configure a centralized Cisco ISE solution for wireless guest access with users in different time zones. The guest account activation time must be independent of the user’s time zone, and the guest account must be enabled automatically when the user self-registers on the guest portal. Which option in the time profile settings must be selected to meet the requirement?

A. Set the Minimum Account Duration to 10 days. 
B. Set the Duration Hours to 24:00. 
C. Select From Creation Date from the Account Type drop-down list. 
D. Select From First Login from the Account Type drop-down list. 

Show Answer

Question # 8

What should be considered when configuring certificates for BYOD? An endpoint certificate is mandatory for the Cisco ISE BYOD 

A. An Android endpoint uses EST whereas other operation systems use SCEP for enrollment 
B. The CN field is populated with the endpoint host name. 
C. The SAN field is populated with the end user name 

Show Answer

Question # 9

An adminístrator is migrating device administration access to Cisco ISE from the legacy TACACS+ solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs. Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?

A. Enable the privilege levels in Cisco ISE B. 
B. Enable the privilege levels in the IOS devices. 
C. Define the command privileges for levels 2-5 in the IOS devices 
D. Define the command privileges for levels 2-5 in Cisco ISE 

Show Answer

Question # 10

Using the SAK Active Directory Federation Services server. The configurations were performed: • created a new SAML Identity provider profile in Cisco ISE • exported the service provider Information • configured all the required Active Directory Federation Services configurations • Imported the Active Directory Federation Services metadata • configured groups in the new SAML identity • added attributes to the new SAML identity provider profile • configured Advanced Settings in the new SAML identity provider profile Which two actions must be taken to complete the configuration? (Choose two.)

A. Allow Kerberos single sign-on on the Sponsor portal. 
B. Configure the Sponsor portal HTTPS port for Active Directory Federation Services integration. 
C. Customize the Sponsor portal pages for Integration with Active Directory Federation Services. 
D. Add SAML identity provider groups in Sponsor Group Members. 
E. Configure an identity source sequence in the Sponsor portal. 

Show Answer