Free 300-715 Exam Braindumps (page: 29)

Page 28 of 93

An engineer must create an authentication policy in Cisco ISE to allow wired printers that lack support for 802.1X onto the network.
What must the RadiusFlowType be set to in the policy to meet the requirement?

  1. MAB
  2. Wired_MAB
  3. Compliant_Devices
  4. Compliance_Unknown_Devices

Answer(s): B



An engineer is starting to implement a wired 802.1X project throughout the campus. The task is for failed authentication to be logged to Cisco ISE and also have a minimal impact on the users.
Which command must the engineer configure?

  1. monitor-mode enabled
  2. authentication host-mode multi-auth
  3. authentication open
  4. pae dot1x enabled

Answer(s): C



An engineer wants to preselect AD groups to be used in the access policy after integrating Cisco ISE with an active directory.
Which configuration steps must the engineer take to assign groups to the AD on the identity management page?

  1. external identity sources > active directory > groups
  2. user identity groups > groups
  3. external identity sources > groups > active directory
  4. groups > user identity groups

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217351-ad- integration-for-cisco-ise-gui-and-cli.html



An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an "EAP-TLS authentication failed" message when moving between remote sites.
Which configuration must be applied on Cisco ISE?

  1. Use a third-party certificate on the network device.
  2. Add the device to all PSN nodes in the deployment.
  3. Configure an authorization profile for the end users.
  4. Renew the expired certificate on one of the PSN.

Answer(s): B






Post your Comments and Discuss Cisco® 300-715 exam with other Community members:

Exam Discussions & Posts