Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 187–191 (page: 39)

Updated On: 10-Feb-2026

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue.
Which two requirements must be met to implement this change? (Choose two.)

  1. Establish access to one Global Catalog server
  2. Ensure that the NAT address is properly configured
  3. Provide domain administrator access to Active Directory
  4. Configure a secure LDAP connection
  5. Enable IPC access over port 80

Answer(s): A,C



An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode.
When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE,
but the devices do not change their access due to the new profile.
What is the problem?

  1. The default profiler configuration is set to No CoA for the reauthentication setting.
  2. In closed mode, profiling does not work unless CDP is enabled.
  3. The profiler feed is not downloading new information, so the profiler is inactive.
  4. The profiling probes are not able to collect enough information to change the device profile.

Answer(s): A



An administrator made changes in Cisco ISE and needs to apply new permissions for endpoints that have already been authenticated by sending a CoA packet to the network devices.
Which IOS command must be configured on the devices to accomplish this goal?

  1. aaa server radius dynamic-author
  2. authentication command bounce-port
  3. authentication command disable-port
  4. aaa nas port extended

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-10/sec-usr- aaa-xe-16-10-book/sec-rad-coa.pdf





Refer to the exhibit. An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication. Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints-LogicalProfile EQUALS static_list.
Why is this occurring?

  1. The dynamic logical profile is overriding the statically assigned profile.
  2. The logical profile is being statically assigned instead of the identity group.
  3. The identity group is being assigned instead of the logical profile.
  4. The device is changing identity groups after profiling instead of remaining static.

Answer(s): B



An engineer needs to configure Cisco ISE Profiling Services to authorize network access for IP speakers that require access to the intercom system. This traffic needs to be identified if the ToS bit is set to 5 and the destination IP address is the intercom system.
What must be configured to accomplish this goal?

  1. NMAP
  2. NETFLOW
  3. pxGrid
  4. RADIUS

Answer(s): B


Reference:

https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_prof_pol.html



Viewing page 39 of 75
Viewing questions 191 - 195 out of 433 questions


Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!