Free 300-715 Exam Braindumps (page: 35)

Page 34 of 93

A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day.
When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the GuestEndpoints identity store after 1 day and allows access to the guest network after that period.
Which configuration is causing this problem?

  1. The Guest Account Purge Policy is set to 15 days.
  2. The length of access is set to 7 days in the Guest Portal Settings.
  3. The Endpoint Purge Policy is set to 30 days for guest devices.
  4. The RADIUS policy set for guest access is set to allow repeated authentication of the same device.

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_01101.html#concept_0776B37A2C3542189950F5DFB1961FA2



A network administrator is setting up wireless guest access and has been unsuccessful in testing client access. The endpoint is able to connect to the SSID but is unable to gain access to the guest network through the guest portal.
What must be done to identify the problem?

  1. Use traceroute to ensure connectivity.
  2. Use context visibility to verify posture status.
  3. Use the identity group to validate the authorization rules.
  4. Use the endpoint ID to execute a session trace.

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/admin_guide/b_ise_admin_guide_13/ b_ise_admin_guide_sample_chapter_011001.html#concept_87916A77E87745



An organization is hosting a conference and must make guest accounts for several of the speakers attending. The conference ended two days early but the guest accounts are still being used to access the network.
What must be configured to correct this?

  1. Create an authorization rule denying sponsored guest access.
  2. Create an authorization rule denying guest access.
  3. Navigate to the Guest Portal and delete the guest accounts.
  4. Navigate to the Sponsor Portal and suspend the guest accounts.

Answer(s): D



An organization is migrating its current guest network to Cisco ISE and has 1000 guest users in the current database. There are no resources to enter this information into the Cisco ISE database manually.
What must be done to accomplish this task efficiently?

  1. Use an XML file to change the existing format to match that of Cisco ISE.
  2. Use a CSV file to import the guest accounts.
  3. Use a JSON file to automate the migration of guest accounts.
  4. Use SQL to link the existing database to Cisco ISE.

Answer(s): B


Reference:

https://community.cisco.com/t5/network-access-control/ise-2-4-guest-user-import-csv-template- guest-type-and-state/td-p/3686005






Post your Comments and Discuss Cisco® 300-715 exam with other Community members:

Exam Discussions & Posts