300-715 practice questions 351–355

1. Question 351 · 355 in bank

   Select 2

   A network engineer must configure BYOD using Cisco ISE. In the deployment, the users must be able to submit CSR through the end devices as part of the certificate enrollment process. Which two features must be enabled to meet the requirement? (Choose two.)

   • AA certificate provisioning portal must be configured.
   • BDefine a certificate group tag.
   • CCisco ISE internal CA service must be enabled.
   • DA new BYOD portal must be created.
   • EAdd SuperAdmin account into portal admin group.

   Show answer

   Answer: AC

   Next question

2. Question 352 · 355 in bank

   Select 2

   An administrator must configure Cisco ISE to distribute the Cisco Secure Client to Windows systems. The solution must meet these requirements: • Users must install Cisco Secure Client before connecting to the network. • User endpoints that do not have Cisco Secure Client installed must be redirected to the Client Provisioning Portal. These configurations were performed: • enabled client provisioning • uploaded the Cisco Secure Client package • downloaded the Cisco Secure Client compliance module • created a native supplicant profile • created the Cisco Secure Client configuration • created the Client Provisioning Portal • created an authorization profile for client provisioning • configured authorization policies Which two actions must be performed in Cisco ISE to distribute Cisco Secure Client and complete the configuration? (Choose two.)

   • AConfigure client provisioning policies.
   • BCreate an authentication profile.
   • CConfigure remediation actions.
   • DConfigure the BYOD portal.
   • ECreate a posture profile.

   Show answer

   Answer: AE

   Next question

3. Question 353 · 355 in bank

   Select 2

   What are two main components of the Cisco ISE posture service? (Choose two.)

   • Adiscovery services
   • Brun-time services
   • Cadministration services
   • Dassessment services
   • Eprofiling services

   Show answer

   Answer: BC

   Next question

4. Question 354 · 355 in bank

   An organization is implementing Cisco ISE posture services and testing the policy on an endpoint with MAC address 00:00:5E:00:53:FF. The policy must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network. The endpoint currently has firewall applications from multiple vendors. Which configuration must be performed to enable the posture check and meet the requirement?

   • Acreate file registry condition to ensure that the firewall is installed and running appropriately
   • Bconfigure a compound condition to look for the native firewall application
   • Capply a condition to check for any vendor firewall application
   • Dimplement a condition to identify the applications installed and validate the firewall apps

   Show answer

   Answer: C

   Next question

5. Question 355 · 355 in bank

   Select 2

   Which two port numbers are used by RADIUS that encrypts only user's passwords for authentication service? (Choose two.)

   • ATCP/69
   • BUDP/1812
   • CUDP/1813
   • DUDP/667
   • ETCP/49

   Show answer

   Answer: BC

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-715 practice, question 351. 355 questions available.