Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. Cisco
  5. 300-715

Cisco 300-715 Exam
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) (Page 41 )

Updated On: 7-Feb-2026
Page 15 of 75
PDF with 384 Questions

An organization wants to standardize the 802.1X configuration on their switches and remove static ACLs on the switch ports while allowing Cisco ISE to communicate to the switch what access to provide.
What must be configured to accomplish this task?

  1. dynamic access list within the authorization profile
  2. extended access-list on the switch for the client
  3. security group tag within the authorization policy
  4. port security on the switch based on the client’s information

Answer(s): A





Refer to the exhibit.
In which scenario does this switch configuration apply?

  1. when allowing a hub with multiple clients connected
  2. when allowing multiple IP phones to be connected
  3. when preventing users with hypervisor
  4. when bypassing IP phone authentication

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/5700/sec- user-8021x-xe-3se-5700-book/sec-ieee-802x-multi-auth.html





Refer to the exhibit.
Which switch configuration change will allow only one voice and one data endpoint on each port?

  1. auto to manual
  2. mab to dot1x
  3. multi-auth to multi-domain
  4. multi-auth to single-auth

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/ configuration_guide/sec/b_166_sec_9300_cg/configuring_ieee_802_1x_port_based_authentication.html



A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice.
Which command should the engineer run on the interface to accomplish this goal?

  1. authentication host-mode multi-domain
  2. authentication host-mode single-host
  3. authentication host-mode multi-auth
  4. authentication host-mode multi-host

Answer(s): A


Reference:

https://www.pearsonitcertification.com/articles/article.aspx?p=1762597



An administrator connects an HP printer to a dot1x enable port, but the printer is nor accessible.
Which feature must the administrator enable to access the printer?

  1. change of authorization
  2. MAC authentication bypass
  3. TACACS authentication
  4. RADIUS authentication

Answer(s): B


Reference:

https://community.cisco.com/t5/network-access-control/ise-mab-soa/td-p/2214921






Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:

Join the 300-715 Discussion