QUESTION: 186

An administrator is configuring a new profiling policy within Cisco ISE. The organization has several endpoints that are the same device type, and all have the same Block ID in their MAC address. The profiler does not currently have a profiling policy created to categorize these endpoints, therefore a custom profiling policy must be created.
Which condition must the administrator use in order to properly profile an ACME AI Connector endpoint for network access with MAC address 01:41:14:65:50:AB?

CDP_cdpCacheDeviceID_CONTAINS_<MAC ADDRESS>
MAC_MACAddress_CONTAINS_<MAC ADDRESS>
Radius_Called_Station-ID_STARTSWITH_<MAC ADDRESS>
MAC_OUI_STARTSWITH_<MAC ADDRESS>

Answer(s): D

Reveal Solution Next Question

QUESTION: 187

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue.
Which two requirements must be met to implement this change? (Choose two.)

Establish access to one Global Catalog server
Ensure that the NAT address is properly configured
Provide domain administrator access to Active Directory
Configure a secure LDAP connection
Enable IPC access over port 80

Answer(s): A,C

Reveal Solution Next Question

QUESTION: 188

An administrator enables the profiling service for Cisco ISE to use for authorization policies while in closed mode.
When the endpoints connect, they receive limited access so that the profiling probes can gather information and Cisco ISE can assign the correct profiles. They are using the default values within Cisco ISE,
but the devices do not change their access due to the new profile.
What is the problem?

The default profiler configuration is set to No CoA for the reauthentication setting.
In closed mode, profiling does not work unless CDP is enabled.
The profiler feed is not downloading new information, so the profiler is inactive.
The profiling probes are not able to collect enough information to change the device profile.

Answer(s): A

Reveal Solution Next Question

QUESTION: 189

An administrator made changes in Cisco ISE and needs to apply new permissions for endpoints that have already been authenticated by sending a CoA packet to the network devices.
Which IOS command must be configured on the devices to accomplish this goal?

aaa server radius dynamic-author
authentication command bounce-port
authentication command disable-port
aaa nas port extended

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_aaa/configuration/xe-16-10/sec-usr- aaa-xe-16-10-book/sec-rad-coa.pdf

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 48)

QUESTION: 186

QUESTION: 187

QUESTION: 188

QUESTION: 189

Reference:

Exam Discussions & Posts