300-715無料問題集「Cisco Implementing and Configuring Cisco Identity Services Engine」

質問 1

An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes. Which two persona configurations allow the engineer to successfully test redundancy of a failed node?
(Choose two.)

（A）Configure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary.

（B）Configure both nodes with the PAN, MnT, and PSN personas.

（C）Configure one of the Cisco ISE nodes as the primary PAN and PSN personas and the other as the secondary.

（D）Configure both nodes with the PAN and MnT personas only.

（E）Configure one of the Cisco ISE nodes as the Health Check node.

正解：A、C 解答を投票する

質問 2

An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers. What must be done to accomplish this task?

（A）Create a sponsor portal to allow guests to create accounts using their social media logins.

（B）Create a sponsored guest portal and enable social media in the external identity sources.

（C）Create a self-registered guest portal and enable the feature for social media logins

（D）Create a hotspot portal and enable social media login for network access

正解：C 解答を投票する

質問 3

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two)

（A）MSRPC 445

（B）HTTP 80

（C）HTTPS 443

（D）TELNET 23

（E）LDAP 389

正解：A、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the authorized protocol lists?

（A）MS-CHAPv2

（B）EAP-TLS

（C）Process Host Lookup

（D）CHAP

正解：C 解答を投票する

質問 5

Which statement is not correct about the Cisco ISE Monitoring node?

（A）The local collector buffers transport the collected data to designated Cisco ISE Monitoring nodes as syslog; once Monitoring nodes are globally defined via Administration, ISE nodes automatically send logs to one or both of the configured Monitoring nodes.

（B）The local collector agent process runs only the Inline Posture node.

（C）The local collector agent collects logs locally from itself and from any NAD that is configured to send logs to the Policy Service node.

（D）Cisco ISE supports distributed log collection across all nodes to optimize local data collection, aggregation, and centralized correlation and storage.

正解：B 解答を投票する

質問 6

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network.
Which node should be used to accomplish this task?

（A）pxGrid

（B）primary PAN

（C）MnT

（D）PSN

正解：D 解答を投票する

質問 7

An administrator must configure Cisco ISE to authenticate a user accessing a Cisco Adaptive Security Appliance firewall using SSH. The solution must meet these requirements:
- The local Cisco ISE database must be used for user authentication
- ASA commands run by users must be validated
The configurations were performed:
- added the Cisco Adaptive Security Appliance firewall
- configured user accounts
- enabled Device Admin Service in Cisco ISE
- configured a TACACS profile
- configured an authorization policy
- configured the Cisco Adaptive Security Appliance firewall for
authentication and authorization
Which two actions must be taken in Cisco ISE? (Choose two.)

（A）Enable local authentication.

（B）Configure a user identity group.

（C）Configure an authentication profile.

（D）Configure an authorization profile.

（E）Configure TACACS command sets.

正解：D、E 解答を投票する

質問 8

What is needed to configure wireless guest access on the network?

（A）WEBAUTH ACL for redirection

（B）endpoint already profiled in ISE

（C）Captive Portal Bypass turned on

（D）valid user account in Active Directory

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

A network security administrator needs a web authentication configuration when a guest user connects to the network with a wireless connection using these steps:
- An initial MAB request is sent to the Cisco ISE node.
- Cisco ISE responds with a URL redirection authorization profile if
the user's MAC address is unknown in the endpoint identity store.
- The URL redirection presents the user with an AUP acceptance page
when the user attempts to go to any URL.
Which authentication must the administrator configure on Cisco ISE?

（A）wired NAD with local WebAuth

（B）NAD with central WebAuth

（C）device registration WebAuth

（D）WLC with local WebAuth

正解：B 解答を投票する

質問 10

Which two default endpoint identity groups does Cisco ISE create? (Choose two )

（A）profiled

（B）endpoint

（C）block list

（D）allow list

（E）unknown

正解：A、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints.
The metadata must contain traffic information relating to the endpoints instead of industry- standard protocol information.
Which probe should be enabled to meet these requirements?

（A）SNMP query probe

（B）NetFlow probe

（C）DNS probe

（D）DHCP probe

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

（A）VLAN

（B）SGT

（C）dACL

（D）RBAC

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

300-715 無料問題集「Cisco Implementing and Configuring Cisco Identity Services Engine」

弊社を連絡する

関連リンク

トップ試験