Free Implementing and Configuring Cisco Identity Services Engine Exam 300-715 Exam Practice Test

What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?

• Set the NAC State option to SNMP NAC.
• Set the NAC State option to RADIUS NAC.
• Use the radius-server vsa send authentication command.
• Use the ip access-group webauth in command.

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE. but the devices do not change their access due to the new profile. What is the problem'?

• In closed mode, profiling does not work unless CDP is enabled.
• The profiling probes are not able to collect enough information to change the device profile
• The profiler feed is not downloading new information so the profiler is inactive
• The default profiler configuration is set to No CoA for the reauthentication setting

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two )

• publisher
• administration
• primary
• policy service
• subscriber

A network administrator is configuring authorization policies on Cisco ISE There is a requirement to use AD group assignments to control access to network resources After a recent power failure and Cisco ISE rebooting itself, the AD group assignments no longer work What is the cause of this issue?

• The AD join point is no longer connected.
• The AD DNS response is slow.
• The certificate checks are not being conducted.
• The network devices ports are shut down.

A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication Which two commands must be entered to meet this requirement? (Choose two)

• Ip http secure-authentication
• Ip http server
• Ip http redirection
• Ip http secure-server
• Ip http authentication

A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task?

• PEAP
• EAP-MD5
• LEAP
• EAP-TLS
• EAP-TTLS

An employee must access the internet through the corporate network from a new mobile device that does not support native supplicant provisioning provided by Cisco ISE. Which portal must the employee use to provision to the device?

• BYOD
• Personal Device
• My Devices
• Client Provisioning

What are the minimum requirements for deploying the Automatic Failover feature on Administration nodes in a distributed Cisco ISE deployment?

• a primary and secondary PAN and a health check node for the Secondary PAN
• a primary and secondary PAN and no health check nodes
• a primary and secondary PAN and a pair of health check nodes
• a primary and secondary PAN and a health check node for the Primary PAN

A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice. Which command should the engineer run on the interface to accomplish this goal?

• authentication host-mode single-host
• authentication host-mode multi-auth
• authentication host-mode multi-host
• authentication host-mode multi-domain

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen What is causing this issue?

• Cisco ISE only sees the built-in groups, not user created ones
• The groups are present but need to be manually typed as conditions
• Cisco ISE's connection to the AD join point is failing
• The groups are not added to Cisco ISE under the AD join point