Free 300-715 Exam braindumps download (300-715 exam dumps Free)

QUESTION: 71

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition. However, other groups that are in the same domain are seen.
What is causing this issue?

Cisco ISE’s connection to the AD join point is failing.
Cisco ISE only sees the built-in groups, not user created ones.
The groups are not added to Cisco ISE under the AD join point.
The groups are present but need to be manually typed as conditions.

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/ b_ISE_AD_integration_2x.html

Show Answer Next Question

QUESTION: 72

An engineer is implementing network access control using Cisco ISE and needs to separate the traffic based on the network device ID and use the IOS device sensor capability.
Which probe must be used to accomplish this task?

NetFlow probe
HTTP probe
RADIUS probe
network scan probe

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200292-Configure- Device-Sensor-for-ISE-Profilin.html

Show Answer Next Question

QUESTION: 73

What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

EAP-TLS uses a username and password for authentication to enhance security, while EAP-MS-CHAPv2 does not.
EAP-TLS uses multiple forms of authentication, while EAP-MS-CHAPv2 only uses one.
EAP-TLS uses a device certificate for authentication to enhance security, while EAP-MS-CHAPv2 does not.
EAP-TLS secures the exchange of credentials, while EAP-MS-CHAPv2 does not.

Answer(s): C

Reference:

https://www.securew2.com/blog/eap-tls-vs-peap-mschapv2-which-authentication-protocol-is- superior

Show Answer Next Question

QUESTION: 74

What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?

Use the ip access-group webauth in command.
Use the radius-server vsa send authentication command.
Set the NAC State option to SNMP NA
Set the NAC State option to RADIUS NAC.

Answer(s): D

Reference:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/ b_cg76_chapter_0110001.pdf

Show Answer Next Question

QUESTION: 75

A network administrator is configuring authorization policies in Cisco ISE. There is a requirement to use AD group assignments to control access to network resources. After a recent power failure and Cisco ISE rebooting itself, the AD group assignments no longer work.
What is the cause of this issue?

The AD join point is no longer connected.
The certificate checks are not being conducted.
The network devices ports are shut down.
The AD DNS response time is slow.

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/ b_ISE_AD_integration_2x.html#ID612

Show Answer Next Question

Free 300-715 Exam Braindumps Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 71–75 (page: 16)

QUESTION: 71

Reference:

QUESTION: 72

Reference:

QUESTION: 73

Reference:

QUESTION: 74

Reference:

QUESTION: 75

Reference:

Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 71–75 (page: 16)