Cisco 300-715 SISE Exam Practice Test Instant Access

Question 1

Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

Alarge deployment with fully distributed nodes running all personas

Bmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs

Cmedium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs

Dsmall deployment with one primary and one secondary node running all personas

Answer : C

Question 2

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

ACommon Name and GUID

BMAC Address and GUID

CDistinguished Name

DCommon Name

Answer : B

The engineer needs to select the option of MAC Address and GUID in the Subject Alternative Name field when configuring a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes.

Question 3

An administrator must block access to BYOD endpoints that were onboarded without a certificate and have been reported as stolen in the Cisco ISE My Devices Portal. Which condition must be used when configuring an authorization policy that sets DenyAccess permission?

AEndpoint Identity Group is Blocklist, and the BYOD state is Registered.

BEndpoint Identify Group is Blocklist, and the BYOD state is Pending.

CEndpoint Identity Group is Blocklist, and the BYOD state is Lost.

DEndpoint Identity Group is Blocklist, and the BYOD state is Reinstate.

Answer : A

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/b_ISE_admin_26_byod.html

Question 4

What is a difference between TACACS+ and RADIUS in regards to encryption?

ATACACS+ encrypts only the password, whereas RADIUS encrypts the username and password.

BTACACS+ encrypts the username and password, whereas RADIUS encrypts only the password.

CTACACS+ encrypts the password, whereas RADIUS sends the entire packet in clear text.

DTACACS+ encrypts the entire packet, whereas RADIUS encrypts only the password.

Answer : D

Question 5

An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

AAnyconnect network visibility module

BAnyconnect compliance module

CAnyConnectProfile.xml file

DAnyConnectProfile.xsd file

EAnyconnect agent image

Answer : B, D

Question 6

An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?

AThe ip ssh source-interface command needs to be set on the switch

B802.1X authentication needs to be configured on the switch.

CThe RSA keypair used for SSH must be regenerated after enabling TACACS+.

DThe switch needs to be added as a network device in Cisco ISE and set to use TACACS+.

Answer : D

Question 7

What is a difference between RADIUS and TACACS+?

ARADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.

BRADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.

CRADIUS combines authentication and authorization functions, and TACACS+ separates them.

DRADIUS supports command accounting, and TACACS+ does not.

Answer : C

Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine SISE Exam Practice Test