Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 86–90 (page: 19)

Updated On: 10-Feb-2026

An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy.
Which two components must be configured, in addition to Active Directory groups, to achieve this goal? (Choose two.)

  1. Identity Source Sequences
  2. LDAP External Identity Sources
  3. Active Directory External Identity Sources
  4. Library Condition for Identity Group: User Identity Group
  5. Library Condition for External Identity: External Groups

Answer(s): C,E



Which deployment mode allows for one or more policy service nodes to be used for session failover?

  1. centralized
  2. secondary
  3. standalone
  4. distributed

Answer(s): D



An engineer is configuring 802.1X and is testing out their policy sets. After authentication, some endpoints are given an access-reject message but are still allowed onto the network.
What is causing this issue to occur?

  1. The authorization results for the endpoints include the Trusted security group tag.
  2. The authorization results for the endpoints include a dACL allowing access.
  3. The switch port is configured with authentication event server dead action authorize vlan.
  4. The switch port is configured with authentication open.

Answer(s): D



A network administrator is currently using Cisco ISE to authenticate devices and users via 802.1X. There is now a need to also authorize devices and users using EAP-TLS.
Which two additional components must be configured in Cisco ISE to accomplish this? (Choose two.)

  1. Certificate Authentication Profile
  2. EAP Authorization Profile
  3. Network Device Group
  4. Common Name attribute that maps to an identity store
  5. Serial Number attribute that maps to a CA Server

Answer(s): A,B



An engineer is configuring Cisco ISE policies to support MAB for devices that do not have 802.1X capabilities. The engineer is configuring new endpoint identity groups as conditions to be used in the AuthZ policies, but noticed that the endpoints are not hitting the correct policies.
What must be done in order to get the devices into the right policies?

  1. Create an AuthZ policy to identify Unknown devices and provide partial network access prior to profiling.
  2. Add an identity policy to dynamically add the IP address of the devices to their endpoint identity groups.
  3. Identify the non 802.1X supported device types and create custom profiles for them to profile into.
  4. Manually add the MAC addresses of the devices to endpoint ID groups in the context visibility database.

Answer(s): D



Viewing page 19 of 75
Viewing questions 91 - 95 out of 433 questions


Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!