300-715 practice questions 311–320

1. Question 311 · 355 in bank

   Select 2

   Which two external identity stores are supported by Cisco ISE for password types? (Choose two.)

   • ATACACS+ Token Server
   • BRADIUS Token Server
   • CLDAP
   • DSQL
   • EOBDC

   Show answer

   Answer: BC

   Next question

2. Question 312 · 355 in bank

   Select 2

   Using the SAML protocol, an administrator must configure the Cisco ISE Sponsor portal to authenticate users with an external Microsoft Active Directory Federation Services server. The configurations were performed: • created a new SAML identity provider profile in Cisco ISE • exported the service provider information • configured all the required Active Directory Federation Services configurations • imported the Active Directory Federation Services metadata • configured groups in the new SAML identity provider profile • added attributes to the new SAML identity provider profile • configured Advanced Settings in the new SAML identity provider profile Which two actors must be taken to complete the configuration? (Choose two.)

   • AConfigure the Sponsor portal HTTPS port for Active Directory Federation Services integration
   • BConfigure an identity source sequence in the Sponsor portal
   • CAllow Kerberos single sign-on on the Sponsor portal
   • DCustomize the Sponsor portal pages for integration with Active Directory Federation Services
   • EAdd SAML identity provider groups in Sponsor Group Members

   Show answer

   Answer: BE

   Next question

3. Question 313 · 355 in bank

   Which nodes are supported in a distributed Cisco ISE deployment?

   • AMonitoring nodes for PxGrid services
   • BPolicy Service nodes for session failover
   • CPolicy Service nodes for automatic failover
   • DAdministration nodes for session failover

   Show answer

   Answer: B

   Next question

4. Question 314 · 355 in bank

   An engineer is deploying Cisco ISE in a network that contains an existing Cisco Secure Firewall ASA. The customer requested that Cisco TrustSec be configured so that Cisco ISE and the firewall can share SGT information. Which protocol must be configured on Cisco ISE to meet the requirement?

   • ARADUIS
   • BpxGrid
   • CPAC
   • DSXP

   Show answer

   Answer: D

   Next question

5. Question 315 · 355 in bank

   Which component of the 802.1X authentication process provides the identity credentials and communicates using EAP at Layer 2?

   • Aauthentication server
   • Bauthenticator
   • Cauthentication database
   • Dsupplicant

   Show answer

   Answer: D

   Next question

6. Question 316 · 355 in bank

   

   Refer to the exhibit. An engineer must configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The Cisco Wireless LAN Controller and the Cisco ISE were configured, and the RADIUS-related ports were opened on the firewall. Which additional port must be opened to allow communication between the Cisco Wireless LAN Controller and Cisco ISE?

   • ATCP 80
   • BUDP 1645
   • CUDP 1813
   • DTCP 8443

   Show answer

   Answer: D

   Next question

7. Question 317 · 355 in bank

   An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages related to unknown posture profiles if Cisco ISE fails to determine the posture of the endpoint. Secure Client is deployed to all the endpoints, and all the required Cisco ISE authentication, authorization, and posture policy configurations were performed. Which action must be taken next to complete the configuration?

   • AConfigure a native supplicant on the endpoints to support the posture policies
   • BInstall the compliance module on the endpoints
   • CInstall the latest version of the Secure Client dent on the endpoints
   • DEnable Cisco ISE posture on Secure Client configuration.

   Show answer

   Answer: B

   Next question

8. Question 318 · 355 in bank

   An engineer is assigned to enhance security across the campus network. The task is to enable MAB across all access switches in the network. Which command must be entered on the switch to enable MAB?

   • ASwitch(config)# authentication port-control auto
   • BSwitch(config)# mab
   • CSwitch# authentication port-control auto
   • DSwitch(config-if)# mab

   Show answer

   Answer: D

   Next question

9. Question 319 · 355 in bank

   Select 2

   The Cisco Wireless LAN Controller and guest portal must be set up in Cisco ISE. These configurations were performed: • configured all the required Cisco Wireless LAN Controller configurations • added the wireless controller to Cisco ISE network devices • created an endpoint identity group • configured credentials to be sent by email • configured the SMTP server • configured an authorization profile with redirection to the guest portal and redirected the access control list • configured an authentication policy for MAB users • created an authorization policy Which two components must be created to complete the configuration? (Choose two.)

   • Asponsor portal
   • Bhotspot guest portal
   • Csponsor group
   • Dself-registered guest portal
   • Eguest type

   Show answer

   Answer: AC

   Next question

10. Question 320 · 355 in bank

    What is the Microsoft security policy recommendation for fast user switching in Cisco ISE?

    • ADisable BOYD posture agent.
    • BEnable Cisco Secure Client posture agent.
    • CEnable fast user switching.
    • DDisable fast user switching.

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-715 practice, question 311. 355 questions available.