300-715: Implementing and Configuring Cisco Identity Services Engine

Which interface-level command is needed to turn on 802 1X authentication?

Dot1x pae authenticator
dot1x system-auth-control
authentication host-mode single-host
aaa server radius dynamic-author

Correct answer: A

Explanation:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/dot1x.html

Which two features must be used on Cisco ISE to enable the TACACS feature? (Choose two)

Device Administration License
Server Sequence
Command Sets
Enable Device Admin Service
External TACACS Servers

Correct answer: AD

Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

TCP 8909
TCP 8905
CUDP 1812
TCP 443

Correct answer: B

Explanation:

https://community.cisco.com/t5/network-access-control/port-8905-and-or-8909/td-p/3499402

Which permission is common to the Active Directory Join and Leave operations?

Create a Cisco ISE machine account in the domain if the machine account does not already exist
Remove the Cisco ISE machine account from the domain.
Set attributes on the Cisco ISE machine account
Search Active Directory to see if a Cisco ISE machine account already exists.

Correct answer: D

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/ise_active_directory_integration/ b_ISE_AD_integration_2x.html

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two )

TACACS+ supports 802.1X, and RADIUS supports MAB
TACACS+ uses UDP, and RADIUS uses TCP
TACACS+ has command authorization, and RADIUS does not.
TACACS+ provides the service type, and RADIUS does not
TACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

Correct answer: CE

Which use case validates a change of authorization?

An authenticated, wired EAP-capable endpoint is discovered
An endpoint profiling policy is changed for authorization policy.
An endpoint that is disconnected from the network is discovered
Endpoints are created through device registration for the guests

Correct answer: B

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html

Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

EAP server
supplicant
client
authenticator

Correct answer: B

Explanation:

https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).

Which personas can a Cisco ISE node assume?

policy service, gatekeeping, and monitoring
administration, policy service, and monitoring
administration, policy service, gatekeeping
administration, monitoring, and gatekeeping

Correct answer: B

Explanation:

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.htmlThe persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

The persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.

Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

Endpoint
unknown
blacklist
white list
profiled

Correct answer: B

Explanation:

If you do not have a matching profiling policy, you can assign an unknown profiling policy. The endpoint is therefore profiled as Unknown. The endpoint that does not match any profile is grouped within the Unknown identity group. The endpoint profiled to the Unknown profile requires that you create a profile with an attribute or a set of attributes collected for that endpoint. https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html

If you do not have a matching profiling policy, you can assign an unknown profiling policy. The endpoint is therefore profiled as Unknown. The endpoint that does not match any profile is grouped within the Unknown identity group. The endpoint profiled to the Unknown profile requires that you create a profile with an attribute or a set of attributes collected for that endpoint.

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

Keep track of guest user activities
Configure authorization settings for guest users
Create and manage guest user accounts
Authenticate guest users to Cisco ISE

Correct answer: C

Vendor:	Cisco
Exam Code:	300-715
Exam Name:	Implementing and Configuring Cisco Identity Services Engine
Date:	Aug 07, 2023
File Size:	2 MB
Downloads:	8

Download Implementing and Configuring Cisco Identity Services Engine.300-715.CertDumps.2023-08-07.247q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown