300-715 Questions Prepare with Learning Information! 2024 Regularly updated [Q10-Q28]

QUESTION 10
Refer to the exhibit.
Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802 1X authentications? (Choose two )

QUESTION 11
A network administrator must use Cisco ISE to check whether endpoints have the correct version of antivirus installed Which action must be taken to allow this capability?

QUESTION 12
An engineer is configuring posture assessment for their network access control and needs to use an agent that supports using service conditions as conditions for the assessment. The agent should be run as a background process to avoid user interruption but when it is run. the user can see it. What is the problem?

QUESTION 13
An organization is adding new profiling probes to the system to improve profiling on Oseo ISE The probes must support a common network management protocol to receive information about the endpoints and the ports to which they are connected What must be configured on the network device to accomplish this goal?

QUESTION 14
Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

QUESTION 15
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

QUESTION 16
A policy is being created in order to provide device administration access to the switches on a network. There is a requirement to ensure that if the session is not actively being used, after 10 minutes, it will be disconnected. Which task must be configured in order to meet this requirement?

QUESTION 17
What is a function of client provisioning?

QUESTION 18
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?

QUESTION 19
A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task?

QUESTION 20
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

QUESTION 21
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE.
What must be configured within Cisco ISE to accomplish this goal?

QUESTION 22
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

QUESTION 23
An organization is hosting a conference and must make guest accounts for several of the speakers attending.
The conference ended two days early but the guest accounts are still being used to access the network. What must be configured to correct this?

QUESTION 24
An engineer is configuring Cisco ISE policies to support MAB for devices that do not have 802.1X capabilities. The engineer is configuring new endpoint identity groups as conditions to be used in the AuthZ policies, but noticed that the endpoints are not hitting the correct policies. What must be done in order to get the devices into the right policies?

QUESTION 25
What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node ,s deregistered?

QUESTION 26
An administrator is configuring TACACS+ on a Cisco switch but cannot authenticate users with Cisco ISE. The configuration contains the correct key of Cisc039712287. but the switch is not receiving a response from the Cisco ISE instance What must be done to validate the AAA configuration and identify the problem with the TACACS+ servers?

QUESTION 27
Which two ports do network devices typically use for CoA? (Choose two )

QUESTION 28
What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?