2021 Update CCNP Security SISE 300-715 Real Questions

1. 300-715 Free Questions 300-715 Free Questions Implementing and Configuring Cisco Identity Implementing and Configuring Cisco Identity Services Engine (SISE) Services Engine (SISE) https://www.passquestion.com/ https://www.passquestion.com/300-715 300-715.html .html

2. Question 1 Question 1 What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow? flow? A. Network Access Control A. Network Access Control B. My Devices Portal B. My Devices Portal C. Application Visibility and Control C. Application Visibility and Control D. Supplicant Provisioning Wizard D. Supplicant Provisioning Wizard Answer: D Answer: D

3. Question 2 Question 2 A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server. server. Which command is the user missing in the switch’s configuration? Which command is the user missing in the switch’s configuration? A. radius-server vsa send accounting A. radius-server vsa send accounting B. aaa accounting network default start-stop group radius B. aaa accounting network default start-stop group radius C. aaa accounting resource default start-stop group radius C. aaa accounting resource default start-stop group radius D. aaa accounting exec default start-stop group radios D. aaa accounting exec default start-stop group radios Answer: A Answer: A

4. Question 3 Question 3 An engineer is designing a new distributed deployment for Cisco ISE in the network and is An engineer is designing a new distributed deployment for Cisco ISE in the network and is considering failover options for the admin nodes. There is a need to ensure that an admin node is considering failover options for the admin nodes. There is a need to ensure that an admin node is available for configuration of policies at all times. available for configuration of policies at all times. What is the requirement to enable this feature? What is the requirement to enable this feature? A. one primary admin and one secondary admin node in the deployment A. one primary admin and one secondary admin node in the deployment B. one policy services node and one secondary admin node B. one policy services node and one secondary admin node C. one policy services node and one monitoring and troubleshooting node C. one policy services node and one monitoring and troubleshooting node D. one primary admin node and one monitoring and troubleshooting node D. one primary admin node and one monitoring and troubleshooting node Answer: A Answer: A

5. Question 4 Question 4 A network engineer is configuring a network device that needs to filter traffic based on security group A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task? tags using a security policy on a routed into this task? A. cts authorization list A. cts authorization list B. cts role-based enforcement B. cts role-based enforcement C. cts cache enable C. cts cache enable D. cts role-based policy priority-static D. cts role-based policy priority-static Answer: B Answer: B

6. Question 5 Question 5 Which permission is common to the Active Directory Join and Leave operations? Which permission is common to the Active Directory Join and Leave operations? A. Create a Cisco ISE machine account in the domain if the machine account does not already exist A. Create a Cisco ISE machine account in the domain if the machine account does not already exist B. Remove the Cisco ISE machine account from the domain. B. Remove the Cisco ISE machine account from the domain. C. Set attributes on the Cisco ISE machine account C. Set attributes on the Cisco ISE machine account D. Search Active Directory to see if a Cisco ISE machine account already exists. D. Search Active Directory to see if a Cisco ISE machine account already exists. Answer: D Answer: D

7. Question 6 Question 6 What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network? network? A. MAB A. MAB B. profiling B. profiling C. posture C. posture D. central web authentication D. central web authentication Answer: B Answer: B

8. Question 7 Question 7 An engineer is using Cisco ISE and configuring guest services to allow wireless An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network. devices to access the network. Which action should accomplish this task? Which action should accomplish this task? A. Create the redirect ACL on the WLC and add it to the WLC policy A. Create the redirect ACL on the WLC and add it to the WLC policy B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy. B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy. C. Create the redirect ACL on Cisco ISE and add it to the WLC policy C. Create the redirect ACL on Cisco ISE and add it to the WLC policy D. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy D. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy Answer: B Answer: B

9. Question 8 Question 8 What is a function of client provisioning? What is a function of client provisioning? A. Client provisioning ensures that endpoints receive the appropriate posture agents. A. Client provisioning ensures that endpoints receive the appropriate posture agents. B. Client provisioning checks a dictionary attribute with a value. B. Client provisioning checks a dictionary attribute with a value. C. Client provisioning ensures an application process is running on the endpoint. C. Client provisioning ensures an application process is running on the endpoint. D. Client provisioning checks the existence, date, and versions of the file on a client. D. Client provisioning checks the existence, date, and versions of the file on a client. Answer: A Answer: A

10. Question 9 Question 9 An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node. different node. Which persona should be configured with the largest amount of storage in this environment? Which persona should be configured with the largest amount of storage in this environment? A. policy Services A. policy Services B. Primary Administration B. Primary Administration C. Monitoring and Troubleshooting C. Monitoring and Troubleshooting D. Platform Exchange Grid D. Platform Exchange Grid Answer: C Answer: C

11. Question 10 Question 10 During BYOD flow, from where does a Microsoft Windows PC download the Network Setup During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant? Assistant? A. Cisco App Store A. Cisco App Store B. Microsoft App Store B. Microsoft App Store C. Cisco ISE directly C. Cisco ISE directly D. Native OTA functionality D. Native OTA functionality Answer: C Answer: C