Free 300-715 Exam Braindumps (page: 30)

Page 29 of 93

An engineer must develop a policy that utilizes AD group membership on Cisco ISE.
Which type of policy element must the engineer configure to create an AD group within a policy?

  1. conditions
  2. results
  3. dictionaries
  4. smart conditions

Answer(s): A



An engineer is working on a switch and must tag packets with SGT values such that it learns via SXP.
Which command must be entered to meet this requirement?

  1. ip source guard
  2. ip arp inspection
  3. ip device tracking maximum
  4. ip dhcp snooping

Answer(s): D



An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to connect to the network.
Which port-control option must the engineer configure?

  1. pae-disabled
  2. auto
  3. force-authorized
  4. force-unauthorized

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-11-0E/configuration/guide/ xe-311-cg/dot1x.html



A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the authorized protocol lists?

  1. EAP-TLS
  2. MS-CHAPv2
  3. Process Host Lookup
  4. CHAP

Answer(s): C


Reference:

https://community.cisco.com/t5/network-access-control/self-register-guest-access-mab- configuration-troubles/td-p/3517589






Post your Comments and Discuss Cisco® 300-715 exam with other Community members:

Exam Discussions & Posts