Practice Free 300-715 Exam Online Questions
Which controller option allows a user to switch from the provisioning SSID to the employee SSID after registration?
- A . User Idle Timeout
- B . Fast SSID Change
- C . AP SSID Fallback
- D . AAA Override
An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed. The logical profile Printers must be used in the authorization rule and the rule must be hit.
What must be done to ensure that this configuration will be successful^
- A . Create a new logical profile for the new printer policy
- B . Enable the EndPoints: EndPointPolicy condition in the authorization policy.
- C . Add the new profiling policy to the logical profile Printers.
- D . Modify the profiler conditions to ensure that it goes into the correct logical profile
An organization is migrating its current guest network to Cisco ISE and has 1000 guest users in the current database There are no resources to enter this information into the Cisco ISE database manually.
What must be done to accomplish this task effciently?
- A . Use a CSV file to import the guest accounts
- B . Use SOL to link me existing database to Cisco ISE
- C . Use a JSON fie to automate the migration of guest accounts
- D . Use an XML file to change the existing format to match that of Cisco ISE
A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices.
Where in the Layer 2 frame should this be verified?
- A . CMD filed
- B . 802.1Q filed
- C . Payload
- D . 802.1 AE header
A
Explanation:
https://www.cisco.com/c/dam/global/en_ca/assets/ciscoconnect/2014/pdfs/policy_defined_segmentation_with_trustsec_rob_bleeker.pdf (slide 25)
An engineer is enabling a newly configured wireless SSID for tablets and needs visibility into which other types of devices are connecting to it.
What must be done on the Cisco WLC to provide this information to Cisco ISE9
- A . enable IP Device Tracking
- B . enable MAC filtering
- C . enable Fast Transition
- D . enable mDNS snooping
Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)
- A . The guest device successfully associates with the correct SSID.
- B . The guest user gets redirected to the authentication page when opening a browser.
- C . The guest device has internal network access on the WLAN.
- D . The guest device can connect to network file shares.
- E . Cisco ISE sends a CoA upon successful guest authentication.
A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE.
Which command most be issued for this to work?
- A . copy certificate Ise
- B . application configure Ise
- C . certificate configure Ise
- D . Import certificate Ise
B
Explanation:
https://community.cisco.com/t5/network-access-control/ise-certificate-import-export/m-p/3847746
An employee logs on to the My Devices portal and marks a currently on-boarded device as ‘Lost’.
Which two actions occur within Cisco ISE as a result oà this action? (Choose two)
- A . Certificates provisioned to the device are not revoked
- B . BYOD Registration status is updated to No
- C . The device access has been denied
- D . BYOD Registration status is updated to Unknown.
- E . The device status is updated to Stolen
AB
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01111.html
An engineer must use Cisco ISE profiler services to provide network access to Cisco IP phones that cannot support 802.1X. Cisco ISE is configured to use the access switch device sensor information system-description and platform-type to profile Cisco IP phones and allow access.
Which two protocols must be configured on the switch to complete the configuration? (Choose two.)
- A . CDP
- B . EAPOL
- C . LLDP
- D . SNMP
- E . STP
An administrator is attempting to join a new node to the primary Cisco ISE node, but receives the error message "Node is Unreachable".
What is causing this error?
- A . The second node is a PAN node.
- B . No administrative certificate is available for the second node.
- C . The second node is in standalone mode.
- D . No admin privileges are available on the second node.
B
Explanation:
https://www.ciscopress.com/articles/article.asp?p=2812072