[Q140-Q161] Get 100% Real 300-715 Accurate & Verified Answers As Seen in the Real Exam!

QUESTION 140
What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

QUESTION 141
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?

QUESTION 142
What is a function of client provisioning?

QUESTION 143
In which scenario does Cisco ISE allocate an Advanced license?

QUESTION 144
An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
A)

B)

C)

D)

QUESTION 145
A network engineer needs to deploy 802.1x using Cisco ISE in a wired network environment where thin clients download their system image upon bootup using PXE. For which mode must the switch ports be configured?

QUESTION 146
A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

QUESTION 147
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

QUESTION 148
An administrator is configuring a Cisco WLC for web authentication Which two client profiling methods are enabled by default if the Apply Cisco ISE Default Settings check box has been selected’? (Choose two.)

QUESTION 149
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

QUESTION 150
Which permission is common to the Active Directory Join and Leave operations?

QUESTION 151
Which protocol must be allowed for a BYOD device to access the BYOD portal?

QUESTION 152
An administrator wants to configure network device administration and is trying to decide whether to use TACACS* or RADIUS. A reliable protocol must be used that can check command authorization Which protocol meets these requirements and why?

QUESTION 153
What is needed to configure wireless guest access on the network?

QUESTION 154
An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?

QUESTION 155
Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

QUESTION 156
An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

QUESTION 157
An administrator for a small network is configuring Cisco ISE to provide dynamic network access to users. Management needs Cisco ISE to not automatically trigger a CoA whenever a profile change is detected. Instead, the administrator needs to verify the new profile and manually trigger a CoA. What must be configuring in the profiler to accomplish this goal?

QUESTION 158
An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

QUESTION 159
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?

QUESTION 160
Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE?
(Choose two).

QUESTION 161
In which two ways can users and endpoints be classified for TrustSec? (Choose two)