Cisco 300-715 Practice Exam Questions

Cisco 300-715 Sample Question Answers

Question # 1

What are the minimum requirements for deploying the Automatic Failover feature on Administration nodes in a distributed Cisco ISE deployment?

A. a primary and secondary PAN and a health check node for the Secondary PAN 
B. a primary and secondary PAN and no health check nodes 
C. a primary and secondary PAN and a pair of health check nodes 
D. a primary and secondary PAN and a health check node for the Primary PAN 

Show Answer

Question # 2

An administrator must provide wired network access to unidentified Cisco devices that fail 802.1X authentication. Cisco ISE profiling services must be configured to gather Cisco Discovery Protocol and LLDP endpoint information from a Cisco switch. These configurations were performed: • configured switches to accept SNMP queries from Cisco ISE • enabled Cisco Discovery Protocol and LLDP on the switches • added the switch as a NAD to Cisco ISE What must be enabled to complete the configuration?

A. SNMP traps on the switch 
B. SNMP MIBs in Cisco ISE 
C. SNMP Trap probe in Cisco ISE 
D. SNMP Query probe in Cisco ISE 

Show Answer

Question # 3

An administrator is editing a csv list of endpoints and wants to reprofile some of the devices indefinitely before importing the list into Cisco ISE. Which field and Boolean value must be changed for the devices before the list is reimported?

A. Identity Group Assignment field and Static Assignment field set to the value FALSE 
B. Policy Assignment field and Static Assignment field set to the value TRUE 
C. Policy Assignment field and Static Assignment field set to the value FALSE 
D. Identity Group Assignment field and Static Assignment field set to the value TRUE 

Show Answer

Question # 4

A network engineer needs to deploy 802.1x using Cisco ISE in a wired network environment where thin clients download their system image upon bootup using PXE. For which mode must the switch ports be configured?

A. closed 
B. restricted 
C. monitor 
D. low-impact 

Show Answer

Question # 5

A network administrator adds network access devices to Cisco ISE. After a security breach, the management team mandates that all network devices must comply with certain standards. All network devices must authenticate through Cisco ISE. Some devices use nondefault CoA ports. What must be configured in Cisco ISE?

A. Network device profile with a port specified 
B. Network access manager with a port specified 
C. Network device group with a port specified 
D. Network device with a port specified

Show Answer

Question # 6

An administrator needs to add a new third party network device to be used with Cisco ISE for Guest and BYOD authorizations. Which two features must be configured under Network Device Profile to achieve this? (Choose two.)

A. dACL 
B. TACACS 
C. URL Redirect 
D. SNMP community 
E. CoA Type 

Show Answer

Question # 7

An engineer is configuring Central Web Authentication in Cisco ISE to provide guest access. When an authentication rule is configured in the Default Policy Set for the Wired_MAB or Wireless_MAB conditions, what must be selected for the "if user not found" setting?

A. CONTINUE 
B. REJECT 
C. ACCEPT 
D. DROP 

Show Answer

Question # 8

An engineer must configure Cisco ISE to provide internet access for guests in which guests are required to enter a code to gain network access. Which action accomplishes the goal?

A. Configure the hotspot portal for guest access and require an access code. 
B. Configure the sponsor portal with a single account and use the access code as the password. 
C. Configure the self-registered guest portal to allow guests to create a personal access code. 
D. Create a BYOD policy that bypasses the authentication of the user and authorizes access codes. 

Show Answer

Question # 9

What is a difference between TACACS+ and RADIUS in regards to encryption?

A. TACACS+ encrypts only the password, whereas RADIUS encrypts the username and password. 
B. TACACS+ encrypts the username and password, whereas RADIUS encrypts only the password. 
C. TACACS+ encrypts the password, whereas RADIUS sends the entire packet in clear text. 
D. TACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password. 

Show Answer

Question # 10

An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages related to unknown posture profiles if Cisco ISE fails to determine the posture of the endpoint. Secure Client is deployed to all the endpoints. and all the required Cisco ISE authentication, authorization, and posture policy configurations were performed. Which action must be taken next to complete the configuration?

A. Install the latest version of the Secure Client client on the endpoints.
B. Enable Cisco ISE posture on Secure Client configuration. 
C. Configure a native supplicant on the endpoints to support the posture policies. 
D. Install the compliance module on the endpoints.

Show Answer