Implementing and Configuring Cisco Identity Services Engine (300-715) Free Practice Test

Question 1

An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE.
The configuration contains the correct key of Cisc039712287. But the switch is not receiving a response from the Cisco ISE instance.
What must be done to validate the AAA configuration and identify the problem with the TACACS+ servers?

A. Test the user account on the server using the test aaa group radius server CUCS user admin pass <key> legacy command.

B. Confirm the authorization policies are correct using the test aaa authorization admin drop legacy command.

C. Validate that the key value is correct using the test aaa authentication admin <key> legacy command.

D. Check for server reachability using the test aaa group tacacs+ admin <key> legacy command.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An organization is adding new profiling probes to the system to improve profiling on Oseo ISE.
The probes must support a common network management protocol to receive information about the endpoints and the ports to which they are connected.
What must be configured on the network device to accomplish this goal?

A. ARP

B. SNMP

C. ICMP

D. WCCP

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode. When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE, but the devices do not change their access due to the new profile. What is the problem?

A. The profiling probes are not able to collect enough information to change the device profile

B. The default profiler configuration is set to No CoA for the reauthentication setting

C. The profiler feed is not downloading new information so the profiler is inactive

D. In closed mode, profiling does not work unless CDP is enabled.

Correct Answer: B

Question 4

A network engineer is configuring a Cisco Wireless LAN Controller in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization policies. Which profiling mechanism must be configured in the Cisco Wireless LAN Controller to accomplish this task?

A. DNS

B. DHCP

C. CDP

D. ICMP

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Drag and Drop Question
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.

Correct Answer:

Question 6

What is the condition that a Cisco ISE authorization policy cannot match?

A. company contact

B. custom

C. time

D. device type

E. posture

Correct Answer: B

Question 7

What is a difference between RADIUS and TACACS+?

A. RADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.

B. RADIUS supports command accounting, and TACACS+ does not.

C. RADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.

D. RADIUS combines authentication and authorization functions, and TACACS+ separates them.

Correct Answer: D

Question 8

A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a join operation. Which action must the security administrator take?

A. Join Cisco ISE to the Active Directory domain

B. Remove Cisco ISE user account from the domain.

C. Remove the ISE machine account from the domain

D. Search Active Directory to see if admin user account exists

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which two statements regarding Zero Touch Provisioning (ZTP) on Cisco ISE are correct?
(Choose two.)

A. Linux is required to create the configuration image

B. ZTP is only supported on VMWare

C. ZTP is only supported on virtual appliances

D. ZTP cannot be used if ICMP is blocked

E. All passwords must be encrypted in the configuration file

Correct Answer: A,C

Question 10

An administrator is attempting to join a new node to the primary Cisco ISE node, but receives the error message "Node is Unreachable". What is causing this error?

A. No administrative certificate is available for the second node.

B. The second node is in standalone mode.

C. The second node is a PAN node.

D. No admin privileges are available on the second node.

Correct Answer: A

Question 11

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes.
Which option must be selected in the Subject Alternative Name field?

A. Distinguished Name

B. Common Name and GUID

C. MAC Address and GUID

D. Common Name

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Which component of the 802.1X authentication process provides the identity credentials and communicates using EAP at Layer 2?

A. authentication database

B. supplicant

C. authentication server

D. authenticator

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos.
Which database should be used to accomplish this goal?

A. LDAP

B. Active Directory

C. Local Database

D. RSA Token Server

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

An administrator is deploying IOT connector with MAC address 11:22 33:44:55:AA that requires network access. New custom profiling policy must be configured in Cisco ISE in order to properly profile the connector. Which condition must be configured to meet the requirement?

A. DHCP_dhcpCacheDeviceID_CONTAINS_

B. MAC_OUI_ENDSWITH_

C. Radius_Called_Station-ID_ENDSSWITH_

D. MAC_MACAddress_CONTAINS_

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cisco Implementing and Configuring Cisco Identity Services Engine (300-715) Free Practice Test