Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 111–115 (page: 24)

Updated On: 10-Feb-2026

An engineer wants to preselect AD groups to be used in the access policy after integrating Cisco ISE with an active directory.
Which configuration steps must the engineer take to assign groups to the AD on the identity management page?

  1. external identity sources > active directory > groups
  2. user identity groups > groups
  3. external identity sources > groups > active directory
  4. groups > user identity groups

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/217351-ad- integration-for-cisco-ise-gui-and-cli.html



An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an "EAP-TLS authentication failed" message when moving between remote sites.
Which configuration must be applied on Cisco ISE?

  1. Use a third-party certificate on the network device.
  2. Add the device to all PSN nodes in the deployment.
  3. Configure an authorization profile for the end users.
  4. Renew the expired certificate on one of the PSN.

Answer(s): B



An engineer must develop a policy that utilizes AD group membership on Cisco ISE.
Which type of policy element must the engineer configure to create an AD group within a policy?

  1. conditions
  2. results
  3. dictionaries
  4. smart conditions

Answer(s): A



An engineer is working on a switch and must tag packets with SGT values such that it learns via SXP.
Which command must be entered to meet this requirement?

  1. ip source guard
  2. ip arp inspection
  3. ip device tracking maximum
  4. ip dhcp snooping

Answer(s): D



An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to connect to the network.
Which port-control option must the engineer configure?

  1. pae-disabled
  2. auto
  3. force-authorized
  4. force-unauthorized

Answer(s): C


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-11-0E/configuration/guide/ xe-311-cg/dot1x.html



Viewing page 24 of 75
Viewing questions 116 - 120 out of 433 questions


Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!