Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: force70

Pass the Cisco CCNP Security 300-715 Questions and answers with CertsForce

Viewing page 9 out of 10 pages
Viewing questions 81-90 out of questions
Questions # 81:

Which controller option allows a user to switch from the provisioning SSID to the employee SSID after registration?

Options:

A.

User Idle Timeout


B.

AAA Override


C.

Fast SSID Change


D.

AP SSID Fallback


Expert Solution
Questions # 82:

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two )

Options:

A.

Random


B.

Monthly


C.

Daily


D.

Imported


E.

Known


Expert Solution
Questions # 83:

An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages related to unknown posture profiles if Cisco ISE fails to determine the posture of the endpoint. Secure Client is deployed to all the endpoints. and all the required Cisco ISE authentication, authorization, and posture policy configurations were performed. Which action must be taken next to complete the configuration?

Options:

A.

Install the latest version of the Secure Client client on the endpoints.


B.

Enable Cisco ISE posture on Secure Client configuration.


C.

Configure a native supplicant on the endpoints to support the posture policies.


D.

Install the compliance module on the endpoints.


Expert Solution
Questions # 84:

Which Cisco ISE deployment model is recommended for an enterprise that has over 50,000 concurrent active endpoints?

Options:

A.

large deployment with fully distributed nodes running all personas


B.

medium deployment with primary and secondary PAN/MnT/pxGrid nodes with shared PSNs


C.

medium deployment with primary and secondary PAN/MnT/pxGrid nodes with dedicated PSNs


D.

small deployment with one primary and one secondary node running all personas


Expert Solution
Questions # 85:

Refer to the exhibit.

Question # 85

Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802 1X authentications? (Choose two )

Question # 85

Options:

A.

Option A


B.

Option B


C.

Option C


D.

Option D


E.

Option E


Expert Solution
Questions # 86:

Which compliance status is set when a matching posture policy has been defined for that endpomt. but all the mandatory requirements during posture assessment are not met?

Options:

A.

unauthorized


B.

untrusted


C.

non-compliant


D.

unknown


Expert Solution
Questions # 87:

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

Options:

A.

Network Access Control


B.

My Devices Portal


C.

Application Visibility and Control


D.

Supplicant Provisioning Wizard


Expert Solution
Questions # 88:

Which two features must be used on Cisco ISE to enable the TACACS. feature? (Choose two)

Options:

A.

Device Administration License


B.

Server Sequence


C.

Command Sets


D.

Enable Device Admin Service


E.

External TACACS Servers


Expert Solution
Questions # 89:

An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?

Options:

A.

Create one shell profile and multiple command sets.


B.

Create multiple shell profiles and multiple command sets.


C.

Create one shell profile and one command set.


D.

Create multiple shell profiles and one command set


Expert Solution
Questions # 90:

Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

Options:

A.

The guest device successfully associates with the correct SSID.


B.

The guest user gets redirected to the authentication page when opening a browser.


C.

The guest device has internal network access on the WLAN.


D.

The guest device can connect to network file shares.


E.

Cisco ISE sends a CoA upon successful guest authentication.


Expert Solution
Viewing page 9 out of 10 pages
Viewing questions 81-90 out of questions