300-715無料問題集「Cisco Implementing and Configuring Cisco Identity Services Engine」

質問 1

Which two statements regarding Zero Touch Provisioning (ZTP) on Cisco ISE are correct?
(Choose two.)

（A）ZTP cannot be used if ICMP is blocked

（B）Linux is required to create the configuration image

（C）All passwords must be encrypted in the configuration file

（D）ZTP is only supported on VMWare

（E）ZTP is only supported on virtual appliances

正解：B、E 解答を投票する

質問 2

What is a valid guest portal type?

（A）My Devices

（B）Sponsor

（C）Captive-Guest

（D）Sponsored-Guest

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group.
Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

（A）Keep track of guest user activities

（B）Authenticate guest users to Cisco ISE

（C）Configure authorization settings for guest users

（D）Create and manage guest user accounts

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Which two fields are available when creating an endpoint on the context visibility page of Cisco IS? (Choose two )

（A）IP Address

（B）Security Group Tag

（C）Endpoint Family

（D）Policy Assignment

（E）Identity Group Assignment

正解：D、E 解答を投票する

質問 5

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two )

（A）publisher

（B）primary

（C）subscriber

（D）administration

（E）policy service

正解：D、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)

（A）WLC

（B）Firepower

（C）IOS

（D）Shell

（E）ASA

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which type of identity store allows for creating single-use access credentials in Cisco ISE?

（A）OpenLDAP

（B）Local

（C）PKI

（D）RSA SecurID

正解：D 解答を投票する

質問 8

An engineer is starting to implement a wired 802.1X project throughout the campus. The task is for failed authentication to be logged to Cisco ISE and also have a minimal impact on the users.
Which command must the engineer configure?

（A）monitor-mode enabled

（B）authentication open

（C）pae dot1x enabled

（D）authentication host-mode multi-auth

正解：A 解答を投票する

質問 9

An engineer has been tasked with using Cisco ISE to restrict network access at the switchport level using 802.1X authentication. Users who fail 802.1X authentication should e redirected via web redirection and have their access restricted via an ACL. What must be configured in Cisco ISE to accomplish this task?

（A）an authentication policy

（B）an authorization rule

（C）an authorization profile

（D）an authentication profile

正解：C 解答を投票する

質問 10

A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

（A）VLAN

（B）SGT

（C）dACL

（D）RBAC

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

A network engineer must remove a device that has been allowlisted. How should the engineer remove it manually on Cisco ISE?

（A）Administration > Identity Management > Groups > Endpoint Identity Groups

（B）Administration > Identity Management > Endpoint Identity Groups > Profiled

（C）Administration > Identity Management > Groups > Endpoint Identity Groups > Profiled

（D）Administration > Identity Management > Endpoint Identity Groups

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 12

An administrator is configuring endpoint profiling and needs to enable CoA for devices that change profiles. Which two actions must be taken to accomplish this goal? (Choose two.)

（A）Use an API to detect when profile changes occur and send instructions to ISE to provide a CoA

（B）Modify the RADIUS endpoint attribute filters to send CoA actions as the profiles change

（C）Enable the CoA policy and create rules for each type

（D）Ensure that the firewall is not blocking port 1700

（E）Define "reauth" in the default CoA action to be used

正解：D、E 解答を投票する

質問 13

An engineer must configure Cisco ISE to provide internet access for guests in which guests are required to enter a code to gain network access. Which action accomplishes the goal?

（A）Configure the sponsor portal with a single account and use the access code as the password.

（B）Configure the hotspot portal for guest access and require an access code.

（C）Configure the self-registered guest portal to allow guests to create a personal access code.

（D）Create a BYOD policy that bypasses the authentication of the user and authorizes access codes.

正解：B 解答を投票する

質問 14

The security team identified a rogue endpoint with MAC address 00:47:44:40:54:1A attached to the network. Which action must security engineer take within Cisco ISE to effectively restrict network access for this endpoint?

（A）Implement authentication policy to deny access.

（B）Configure access control list on network switches to block traffic.

（C）Create authentication policy to force reauthentication.

（D）Add MAC address to the endpoint quarantine list.

正解：D 解答を投票する

質問 15

An administrator adds a new network device to the Cisco ISE configuration to authenticate endpoints to the network. The RADIUS test fails after the administrator configures all of the settings in Cisco ISE and adds the proper configurations to the switch.
What is the issue?

（A）The endpoint does not have the appropriate credentials for network access

（B）The shared secret is incorrect on the switch or on Cisco ISE

（C）The certificate on the switch is self-signed, not a CA-provided certificate

（D）The endpoint profile is showing as ''unknown"

正解：B 解答を投票する

質問 16

An administrator wants to configure network device administration and is trying to decide whether to use TACACS+ or RADIUS. A reliable protocol must be used that can check command authorization. Which protocol meets these requirements and why?

（A）TACACS+ because it runs over UDP

（B）RADIUS because it runs over TCP.

（C）TACACS+ because it runs over TCP

（D）RADIUS because it runs over UDP

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

An administrator is configuring a Cisco WLC for web authentication.
Which two client profiling methods are enabled by default if the Apply Cisco ISE Default Settings check box has been selected? (Choose two.)

（A）LLDP

（B）HTTP

（C）SNMP

（D）DHCP

（E）CDP

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 18

An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

（A）Session Reauthentication

（B）Port Shutdown

（C）Session Termination

（D）Port Bounce

正解：A 解答を投票する

質問 19

When configuring an authorization policy, an administrator cannot see specific Active Directory groups present in their domain to be used as a policy condition.
However, other groups that are in the same domain are seen. What is causing this issue?

（A）The groups are not added to Cisco ISE under the AD join point

（B）Cisco ISE's connection to the AD join point is failing

（C）The groups are present but need to be manually typed as conditions

（D）Cisco ISE only sees the built-in groups, not user created ones

正解：A 解答を投票する

300-715 無料問題集「Cisco Implementing and Configuring Cisco Identity Services Engine」

弊社を連絡する

関連リンク

トップ試験