Free 300-715 Exam braindumps download (300-715 exam dumps Free)

QUESTION: 76

Refer to the exhibit.
Which component must be configured to apply the SGACL?

secure server
host
egress router
ingress router

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SY/configuration/guide/ sy_swcg/trustsec.pdf

QUESTION: 77

A laptop was stolen and a network engineer added it to the block list endpoint identity group.
What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?

Select DROP under If Auth fail within the authentication policy.
Ensure that access to port 8444 is allowed within the ACL.
Ensure that access to port 8443 is allowed within the ACL.
Select DenyAccess within the authentication policy.

Answer(s): B

Show Answer Next Question

When creating a policy within Cisco ISE for network access control, the administrator wants to allow different access restrictions based upon the wireless SSID to which the device is connecting.
Which policy condition must be used in order to accomplish this?

Network Access NetworkDeviceName CONTAINS <SSID Name>
DEVICE Device Type CONTAINS <SSID Name>
Airespace Airespace-Wlan-Id CONTAINS <SSID Name>
Radius Called-Station-ID CONTAINS <SSID Name>

Answer(s): D

Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115734-ise-policies-
ssid-00.html

Show Answer Next Question

QUESTION: 79

A company manager is hosting a conference. Conference participants must connect to an open guest SSID and only use a preassigned code that they enter into the guest portal prior to gaining access to the network.
How should the manager configure Cisco ISE to accomplish this goal?

Create logins for each participant to give them sponsored access.
Create entries in the guest identity group for all participants.
Create an access code to be entered in the AUP mode.
Create a registration code to be entered on the portal splash page.

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/admin_guide/b_ISE_26_admin_guide/ b_ISE_admin_26_guest.html

Show Answer Next Question

QUESTION: 80

An organization has a fully distributed Cisco ISE deployment.
When implementing probes, an administrator must scan for unknown endpoints to learn the IP-to-MAC address bindings. The scan is complete on one PSN, but the information is not available on the others.
What must be done to make the information available?

Cisco ISE must be configured to learn the IP-MAC binding of unknown endpoints via RADIUS authentication, not via scanning.
Cisco ISE must learn the IP-MAC binding of unknown endpoints via DHCP profiling, not via scanning.
Scanning must be initiated from the MnT node to centrally gather the information.
Scanning must be initiated from the PSN that last authenticated the endpoint.

Answer(s): D

Show Answer Next Question

Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 76–80 (page: 17)

QUESTION: 76

Reference:

QUESTION: 77

QUESTION: 78

Reference:

QUESTION: 79

Reference:

QUESTION: 80

Free 300-715 Exam Braindumps Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 76–80 (page: 17)

QUESTION: 76

Reference:

QUESTION: 77

QUESTION: 78

Reference:

QUESTION: 79

Reference:

QUESTION: 80

Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 76–80 (page: 17)