An administrator is configuring an AD domain to be used with authentication for endpoints and users within Cisco ISE. Which two steps are required to configure this to be used as an external identity store? (Choose two.)
Answer(s): D,E
An engineer is configuring Central Web Authentication in Cisco ISE to provide guest access. When an authentication rule is configured in the Default Policy Set for the Wired_MAB or Wireless_MAB conditions, what must be selected for the “if user not found” setting?
Answer(s): D
Selecting CONTINUE as the "if user not found" setting means that if the user is not found or authenticated by the MAB (MAC Authentication Bypass) process, the authentication flow will continue to the next rule or policy in the sequence. This allows for further authentication methods or conditions to be evaluated, such as web authentication for guest access.The other options, ACCEPT (option A), DROP (option B), and REJECT (option C), do not provide the desired behavior in this context. ACCEPT would immediately grant access, which is not appropriate if the user is not found. DROP would block or terminate the connection, and REJECT would reject the connection outright. Both DROP and REJECT options would prevent further evaluation of subsequent rules or policies, potentially denying guest access. Therefore, the correct choice is CONTINUE to allow the authentication flow to proceed.
How is policy services node redundancy achieved in a deployment?
Answer(s): A
An engineer must create an authentication policy in Cisco ISE to allow wired printers that lack support for 802.1X onto the network. What must the RadiusFlowType be set to in the policy to meet the requirement?
Answer(s): B
An engineer is starting to implement a wired 802.1X project throughout the campus. The task is for failed authentication to be logged to Cisco ISE and also have a minimal impact on the users. Which command must the engineer configure?
Answer(s): C
Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-715 content, but please register or login to continue.