Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Cisco CCNP Security 300-715 Questions and answers with CertsForce

Viewing page 1 out of 10 pages
Viewing questions 1-10 out of questions
Questions # 1:

What is a function of client provisioning?

Options:

A.

Client provisioning ensures that endpoints receive the appropriate posture agents.


B.

Client provisioning checks a dictionary attribute with a value.


C.

Client provisioning ensures an application process is running on the endpoint.


D.

Client provisioning checks the existence, date, and versions of the file on a client.


Expert Solution
Questions # 2:

Refer to the exhibit.

Question # 2

An engineer is configuring a client but cannot authenticate to Cisco ISE During troubleshooting, the show authentication sessions command was issued to display the authentication status of each port Which command gives additional information to help identify the problem with the authentication?

Options:

A.

show authentication sessions


B.

show authentication sessions Interface Gil/0/1 output


C.

show authentication sessions interface Gi1/0/1 details


D.

show authentication sessions output


Expert Solution
Questions # 3:

An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy. Which two components must be configured, in addition to Active Directory groups, to achieve this goat? (Choose two )

Options:

A.

Active Directory External Identity Sources


B.

Library Condition for External Identity. External Groups


C.

Identity Source Sequences


D.

LDAP External Identity SourcesE Library Condition for Identity Group: User Identity Group


Expert Solution
Questions # 4:

The Cisco Wireless LAN Controller and guest portal must be set up in Cisco ISE. These configurations were performed:

• configured all the required Cisco Wireless LAN Controller configurations

• added the wireless controller to Cisco ISE network devices

• created an endpoint identity group

• configured credentials to be sent by email

• configured the SMTP server

• configured an authorization profile with redirection to the guest portal and redirected the access control list

• configured an authentication policy for MAB users

• created an authorization policy

Which two components would be required to complete the configuration? (Choose two.)

Options:

A.

sponsor group


B.

hotspot guest portal


C.

sponsor portal


D.

self-registered guest portal


E.

guest type


Expert Solution
Questions # 5:

An engineer is configuring 802.1X and wants it to be transparent from the users ' point of view. The implementation should provide open authentication on the switch ports while providing strong levels of security for non-authenticated devices. Which deployment mode should be used to achieve this?

Options:

A.

closed


B.

low-impact


C.

open


D.

high-impact


Expert Solution
Questions # 6:

An engineer must configure a new authorization policy in Cisco ISE for wireless users. The policy must match a specific SSID name and use standard RADIUS attributes. The Wireless LAN Controller is already configured. Which RADIUS attribute must be configured to meet the requirement?

Options:

A.

Airespace:Airespace-Wlan-Id


B.

RADIUS:Calling-Station-ID


C.

Airespace:Airespace-SSID


D.

RADIUS:Called-Station-ID


Expert Solution
Questions # 7:

A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?

Options:

A.

cts role-based enforcement


B.

cts cache enable


C.

cts role-based policy priority-static


Expert Solution
Questions # 8:

Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)

Options:

A.

Windows Settings


B.

Connection Type


C.

iOS Settings


D.

Redirect ACL


E.

Operating System


Expert Solution
Questions # 9:

Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

Options:

A.

EAP server


B.

supplicant


C.

client


D.

authenticator


Expert Solution
Questions # 10:

A company manager is hosting a conference. Conference participants must connect to an open guest SSID and only use a preassigned code that they enter into the guest portal prior to gaining access to the network. How should the manager configure Cisco ISE to accomplish this goal?

Options:

A.

Create entries in the guest identity group for all participants.


B.

Create an access code to be entered in the AUP page.


C.

Create logins for each participant to give them sponsored access.


D.

Create a registration code to be entered on the portal splash page.


Expert Solution
Viewing page 1 out of 10 pages
Viewing questions 1-10 out of questions