Pass the Cisco CCNP Security 300-715 Questions and answers with CertsForce

Viewing page 6 out of 8 pages
Viewing questions 51-60 out of questions
Questions # 51:

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue. Which two requirements must be met to implement this change? (Choose two.)

Options:

A.

Enable IPC access over port 80.


B.

Ensure that the NAT address is properly configured


C.

Establish access to one Global Catalog server.


D.

Provide domain administrator access to Active Directory.


E.

Configure a secure LDAP connection.


Expert Solution
Questions # 52:

A network administrator must configura endpoints using an 802 1X authentication method with EAP identity certificates that are provided by the Cisco ISE When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network Which EAP type must be configured by the network administrator to complete this task?

Options:

A.

EAP-PEAP-MSCHAPv2


B.

EAP-TTLS


C.

EAP-FAST


D.

EAP-TLS


Expert Solution
Questions # 53:

An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

Options:

A.

MDM


B.

Client provisioning


C.

My devices


D.

BYOD


Expert Solution
Questions # 54:

Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node'?

Options:

A.

radius-server timeout


B.

session-timeout


C.

idle-timeout


D.

termination-action


Expert Solution
Questions # 55:

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

Options:

A.

Common Name and GUID


B.

MAC Address and GUID


C.

Distinguished Name


D.

Common Name


Expert Solution
Questions # 56:

An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers What must be done to accomplish this task?

Options:

A.

Create a sponsor portal to allow guests to create accounts using their social media logins.


B.

Create a sponsored guest portal and enable social media in the external identity sources.


C.

Create a self-registered guest portal and enable the feature for social media logins


D.

Create a hotspot portal and enable social media login for network access


Expert Solution
Questions # 57:

What is a valid guest portal type?

Options:

A.

Sponsored-Guest


B.

My Devices


C.

Sponsor


D.

Captive-Guest


Expert Solution
Questions # 58:

Which two ports do network devices typically use for CoA? (Choose two)

Options:

A.

443


B.

19005


C.

8080


D.

3799


E.

1700


Expert Solution
Questions # 59:

Refer to the exhibit.

Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802 1X authentications? (Choose two )

Question # 59

Options:

A.

Option A


B.

Option B


C.

Option C


D.

Option D


E.

Option E


Expert Solution
Questions # 60:

An administrator is configuring a new profiling policy in Cisco ISE for a printer type that is missing from the profiler feed The logical profile Printers must be used in the authorization rule and the rule must be hit. What must be done to ensure that this configuration will be successful^

Options:

A.

Create a new logical profile for the new printer policy


B.

Enable the EndPoints:EndPointPolicy condition in the authorization policy.


C.

Add the new profiling policy to the logical profile Printers.


D.

Modify the profiler conditions to ensure that it goes into the correct logical profile


Expert Solution
Viewing page 6 out of 8 pages
Viewing questions 51-60 out of questions