Free Implementing and Configuring Cisco Identity Services Engine Exam 300-715 Exam Practice Test

A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store the endpoints to restrict access from. What must be done to accomplish this task''

• Add each MAC address manually to a blocklist identity group and create a policy denying access
• Create a logical profile for each device's profile policy and block that via authorization policies.
• Create a profiling policy for each endpoint with the cdpCacheDeviceld attribute.
• Add each IP address to a policy denying access.

Which two Cisco ISE deployment models require two nodes configured with dedicated PAN and MnT personas? (Choose two.)

• three PSN nodes
• seven PSN nodes with one PxGrid node
• five PSN nodes with one PxGrid node
• two PSN nodes with one PxGrid node
• six PSN nodes

Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

• Device Administration License
• Server Sequence
• Command Sets
• Enable Device Admin Service
• External TACACS Servers

An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

• Port Bounce
• Port Shutdown
• Session Termination
• Session Reauthentication

An employee must access the internet through the corporate network from a new mobile device that does not support native supplicant provisioning provided by Cisco ISE. Which portal must the employee use to provision to the device?

• BYOD
• Personal Device
• My Devices
• Client Provisioning

An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

• Profiling
• Guest access
• Client provisioning
• Posture

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two )

• TACACS+ supports 802.1X, and RADIUS supports MAB
• TACACS+ uses UDP, and RADIUS uses TCP
• TACACS+ has command authorization, and RADIUS does not.
• TACACS+ provides the service type, and RADIUS does not
• TACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

• NetFlow probe
• DNS probe
• DHCP probe
• SNMP query probe

What is a valid guest portal type?

• Sponsored-Guest
• My Devices
• Sponsor
• Captive-Guest

Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)

• Windows Settings
• Connection Type
• iOS Settings
• Redirect ACL
• Operating System