300-715 practice test

1. Question 1 · 1

   Which personas can a Cisco ISE node assume?

   Choose one answer.

   • policy service, gatekeeping, and monitoring
   • administration, monitoring, and gatekeeping
   • administration, policy service, and monitoring
   • administration, policy service, gatekeeping

2. Question 2 · 1

   A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

   Choose one answer.

   • RBAC
   • dACL
   • SGT
   • VLAN

3. Question 3 · 1

   An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

   Choose one answer.

   • guest access
   • profiling
   • posture
   • client provisioning

4. Question 4 · 1

   A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA. Which action does the CoA perform?

   Choose one answer.

   • It terminates the client session.
   • It applies the downloadable ACL provided in the CoA.
   • It triggers the NAD to reauthenticate the client.
   • It applies new permissions provided in the CoA to the client session.

5. Question 5 · 1

   A new employee just connected their workstation to a Cisco IP phone. The network administrator wants to ensure that the Cisco IP phone remains online when the user disconnects their workstation from the corporate network. Which CoA configuration meets this requirement?

   Choose one answer.

   • Reauth
   • Disconnect
   • No CoA
   • Port Bounce

6. Question 6 · 1

   An administrator is trying to collect metadata information about the traffic going across the network to gain added visibility into the hosts. This information will be used to create profiling policies for devices using Cisco ISE so that network access policies can be used. What must be done to accomplish this task?

   Choose one answer.

   • Configure the DHCP probe within Cisco ISE.
   • Configure NetFlow to be sent to the Cisco ISE appliance.
   • Configure the RADIUS profiling probe within Cisco ISE.
   • Configure SNMP to be used with the Cisco ISE appliance.

7. Question 7 · 1

   There are several devices on a network that are considered critical and need to be placed into the ISE database and a policy used for them. The organization does not want to use profiling. What must be done to accomplish this goal?

   Choose one answer.

   • Enter the MAC address in the correct Endpoint Identity Group.
   • Enter the IP address in the correct Endpoint Identity Group.
   • Enter the IP address in the correct Logical Profile.
   • Enter the MAC address in the correct Logical Profile.

8. Question 8 · 1

   Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue. Which two requirements must be met to implement this change? (Choose two.)

   Choose all answers that apply.

   • Establish access to one Global Catalog server
   • Ensure that the NAT address is properly configured
   • Provide domain administrator access to Active Directory
   • Configure a secure LDAP connection
   • Enable IPC access over port 80

9. Question 9 · 1

   What should be considered when configuring certificates for BYOD?

   Choose one answer.

   • The SAN field is populated with the end user name.
   • The CN field is populated with the endpoint host name.
   • An endpoint certificate is mandatory for the Cisco ISE BYOD.
   • An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment.

10. Question 10 · 1

    A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed interface. Which command should be used to accomplish this task?

    Choose one answer.

    • cts role-based policy priority-static
    • cts cache enable
    • cts authorization list
    • cts role-based enforcement

11. Question 11 · 1

    During BYOD flow, where does a Microsoft Windows PC download the Network Setup Assistant?

    Choose one answer.

    • Microsoft App Store
    • Cisco App Store
    • Cisco ISE directly
    • Native OTA functionality

12. Question 12 · 1

    What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

    Choose one answer.

    • Application Visibility and Control
    • Supplicant Provisioning Wizard
    • My Devices Portal
    • Network Access Control

13. Question 13 · 1

    Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two.)

    Choose all answers that apply.

    • Redirect ACL
    • Connection Type
    • Operating System
    • Windows Settings
    • iOS Settings

14. Question 14 · 1

    If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?

    Choose one answer.

    • Client Provisioning
    • BYOD
    • Guest
    • Block list

15. Question 15 · 1

    An engineer is configuring a dedicated SSID for onboarding devices. Which SSID type accomplishes this configuration?

    Choose one answer.

    • hidden
    • guest
    • dual
    • broadcast

Paid access to all 283 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.