Free 300-715 Exam Braindumps
Implementing and Configuring Cisco Identity Services Engine (300-715 SISE) Questions 126–130 (page: 27)

Updated On: 10-Feb-2026

A network administrator must configure endpoints using an 802.1X authentication method with EAP identity certificates that are provided by the Cisco ISE.
When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network.
Which EAP type must be configured by the network administrator to complete the task?

  1. EAP-PEAP-MSCHAPv2
  2. EAP-TTLS
  3. EAP-TLS
  4. EAP-MD5

Answer(s): C

Explanation:

EAP-TLS must be configured because it uses digital certificates for both client and server authentication. Cisco ISE can issue and validate these certificates, ensuring secure 802.1X authentication and authorization for endpoints.



An engineer is configuring web authentication using non-standard ports and needs the switch to redirect traffic to the correct port.
Which command should be used to accomplish this task?

  1. permit tcp any any eq <port number>
  2. ip http port <port number>
  3. aaa group server radius
  4. aaa group server radius proxy

Answer(s): A



An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network.
Which action accomplishes this task?

  1. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy.
  2. Create the redirect ACL on the WLC and add it to the WLC policy.
  3. Create the redirect ACL on Cisco ISE and add it to the WLC policy.
  4. Create the redirect ACL on the WLC and add it to the Cisco ISE policy.

Answer(s): D



An engineer is configuring web authentication and needs to allow specific protocols to permit DNS traffic.
Which type of access list should be used for this configuration?

  1. extended ACL
  2. reflexive ACL
  3. numbered ACL
  4. standard ACL

Answer(s): A



An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to authenticate via 802.1X.
Which command is needed on each switch port for authentication?

  1. dot1x system-auth-control
  2. enable bypass-MAC
  3. enable network-authentication
  4. mab

Answer(s): D



Viewing page 27 of 75
Viewing questions 131 - 135 out of 433 questions


Post your Comments and Discuss Cisco 300-715 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!