[May-2026] 300-715 Exam Dumps - Free Demo & 365 Day Updates
Free Sales Ending Soon - Use Real 300-715 PDF Questions
NEW QUESTION # 74
A network engineer must remove a device that has been allowlisted. How should the engineer remove it manually on Cisco ISE?
- A. Administration > Identity Management > Groups > Endpoint Identity Groups > Profiled
- B. Administration > Identity Management > Endpoint Identity Groups
- C. Administration > Identity Management > Endpoint Identity Groups > Profiled
- D. Administration > Identity Management > Groups > Endpoint Identity Groups
Answer: D
Explanation:
To remove a device that has been allowlisted manually on Cisco ISE, the correct answer is option
- Administration > Identity Management > Groups > Endpoint Identity Groups. This option allows you to view and edit the endpoint identity groups that are configured on Cisco ISE, and to delete any device that belongs to a specific group.
NEW QUESTION # 75
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?
- A. DNS
- B. HTTP
- C. EAP
- D. DHCP
Answer: B
Explanation:
HTTP is the most reasonable answer. User that tried to connect needs to connect to DNS, DHCP and of course EAP.
NEW QUESTION # 76
An engineer must provide network access using a Cisco ISE policy that matches the identity group of endpoints unrecognized by any Cisco ISE profilers and manually adds the endpoints to a new identity group named legacy devices. These configurations were performed on the new endpoint page:
- configured profiling policy
- configured the legacy devices identity group
What must be configured next to complete the configuration?
- A. endpoint description
- B. endpoint device name
- C. endpoint operating system
- D. endpoint MAC address
Answer: D
NEW QUESTION # 77
Which portal is used to customize the settings for a user to log in and download the compliance module?
- A. Client Profiling
- B. Client Endpoint
- C. Client Guest
- D. Client Provisioning
Answer: D
Explanation:
Section: Endpoint Compliance
NEW QUESTION # 78
Which personas can a Cisco ISE node assume'?
- A. administration, policy service, and monitoring
- B. administration, policy service, gatekeeping
- C. administration, monitoring, and gatekeeping
- D. policy service, gatekeeping, and monitoring
Answer: A
Explanation:
Explanation
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html The persona or personas of a node determine the services provided by a node. An ISE node can assume any or all of the following personas: Administration, Policy Service, and Monitoring. The menu options that are available through the administrative user interface are dependent on the role and personas that an ISE node assumes. See Cisco ISE Nodes and Available Menu Options for more information.
NEW QUESTION # 79
An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
- A. Option D
- B. Option B
- C. Option C
- D. Option A
Answer: A
NEW QUESTION # 80
A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the authorized protocol lists?
- A. Process Host Lookup
- B. CHAP
- C. MS-CHAPv2
- D. EAP-TLS
Answer: A
NEW QUESTION # 81
An organization is migrating its current guest network to Cisco ISE and has 1000 guest users in the current database There are no resources to enter this information into the Cisco ISE database manually. What must be done to accomplish this task effciently?
- A. Use a JSON fie to automate the migration of guest accounts
- B. Use an XML file to change the existing format to match that of Cisco ISE
- C. Use a CSV file to import the guest accounts
- D. Use SOL to link me existing database to Ctsco ISE
Answer: C
NEW QUESTION # 82
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?
- A. authenticator
- B. supplicant
- C. EAP server
- D. client
Answer: B
NEW QUESTION # 83
An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
A)
B)
C)
D)
- A. Option D
- B. Option B
- C. Option C
- D. Option A
Answer: A
NEW QUESTION # 84
What should be considered when configuring certificates for BYOD?
- A. The CN field is populated with the endpoint host name.
- B. An Android endpoint uses EST whereas other operation systems use SCEP for enrollment
- C. The SAN field is populated with the end user name
- D. An endpoint certificate is mandatory for the Cisco ISE BYOD
Answer: A
Explanation:
When configuring certificates for Bring Your Own Device (BYOD), it is important to consider populating the CN (Common Name) field with the endpoint host name. The CN field should contain the host name or FQDN (Fully Qualified Domain Name) of the endpoint device. This allows the certificate to be properly validated when the device connects to the network. The CN field helps ensure that the device is correctly identified and authorized for network access.
NEW QUESTION # 85
An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?
- A. dACLs to enforce the various access policies for the users
- B. custom access conditions for defining the different roles
- C. TACACS+ command sets to provide appropriate access
- D. shell profiles with custom attributes that define the various roles
Answer: D
NEW QUESTION # 86
An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs An administrator is adding two more PSNs to this deployment but is having problems adding one of them What is the problem?
- A. The current PAN is only able to track a max of four nodes
- B. Only five PSNs are allowed to be in the Cisco ISE cube if configured this way.
- C. One of the new nodes must be designated as a pxGrid node
- D. The new nodes must be set to primary prior to being added to the deployment
Answer: B
NEW QUESTION # 87
A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA Which action does the CoA perform?
- A. It triggers the NAD to reauthenticate the client
- B. It applies the downloadable ACL provided in the CoA
- C. It applies new permissions provided in the CoA to the client session.
- D. It terminates the client session
Answer: B
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/115732-central-web-auth-00.
html
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/113362-config-web-auth-ise-00.
html
NEW QUESTION # 88
What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?
- A. Cisco-av-pair
- B. State attribute
- C. Event
- D. Class attribute
Answer: A
Explanation:
Section: Profiler
Explanation/Reference:
Reference: https://community.cisco.com/t5/network-access-control/ise-airespace-acl-wlc-problem/td- p/2110491
NEW QUESTION # 89
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE.
What must be configured within Cisco ISE to accomplish this goal?
- A. Add the root certificate authority to the trust store and enable it for authentication.
- B. Add an OCSP profile and configure the root certificate authority as secondary.
- C. Create an SCEP profile to link Cisco ISE with the root certificate authority.
- D. Create a certificate signing request and have the root certificate authority sign it.
Answer: C
NEW QUESTION # 90
What does a fully distributed Cisco ISE deployment include?
- A. All Cisco ISE personas on their own dedicated nodes.
- B. All Cisco ISE personas are sharing the same node.
- C. PAN and MnT on the same node while PSNs are on their own dedicated nodes.
- D. PAN and PSN on the same node while MnTs are on their own dedicated nodes.
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24
/m_setup_cisco_ise.html
NEW QUESTION # 91
A network engineer needs to deploy 802.1x using Cisco ISE in a wired network environment where thin clients download their system image upon bootup using PXE. For which mode must the switch ports be configured?
- A. closed
- B. restricted
- C. monitor
- D. low-impact
Answer: D
NEW QUESTION # 92
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
- A. termination-action
- B. radius-server timeout
- C. session-timeout
- D. idle-timeout
Answer: D
Explanation:
Section: Policy Enforcement
NEW QUESTION # 93
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.
Answer:
Explanation:
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24
/b_ise_admin_guide_24_new_chapter_011.html
Step 1
Choose Administration > System > Deployment.
The Register button will be disabled initially. To enable this button, you must configure a Primary PAN.
Step 2
Check the check box next to the current node, and click Edit.
Step 3
Click Make Primary to configure your Primary PAN.
Step 4
Enter data on the General Settings tab.
Step 5
Click Save to save the node configuration.
NEW QUESTION # 94
A network engineer must configure a centralized Cisco ISE solution for wireless guest access with users in different time zones. The guest account activation time must be independent of the user time zone, and the guest account must be enabled automatically when the user self- registers on the guest portal. Which option in the time profile settings must be selected to meet the requirement?
- A. Select FromCreation from the Account Type dropdown.
- B. Set the Maximum Account Duration to 1 Day.
- C. Select FromFirstLogin from the Account Type dropdown.
- D. Set the Duration field to 24:00:00.
Answer: C
NEW QUESTION # 95
A network administrator is configuring authorization policies on Cisco ISE There is a requirement to use AD group assignments to control access to network resources After a recent power failure and Cisco ISE rebooting itself, the AD group assignments no longer work What is the cause of this issue?
- A. The certificate checks are not being conducted.
- B. The AD join point is no longer connected.
- C. The AD DNS response is slow.
- D. The network devices ports are shut down.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/ise_active_directory_integration/b_ISE_AD_integration_2x.html#ID612
NEW QUESTION # 96
An administrator is trying to collect metadata information about the traffic going across the network to gam added visibility into the hosts. This Information will be used to create profiling policies for devices us mg Cisco ISE so that network access policies can be used What must be done to accomplish this task?
- A. Configure the RADIUS profiling probe within Cisco ISE
- B. Configure NetFlow to be sent to me Cisco ISE appliance.
- C. Configure SNMP to be used with the Cisco ISE appliance
- D. Configure the DHCP probe within Cisco ISE
Answer: D
NEW QUESTION # 97
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two )
- A. access-accept
- B. access-response
- C. access-reserved
- D. access-challenge
- E. access-request
Answer: A,E
NEW QUESTION # 98
In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two )
- A. administration
- B. policy service
- C. publisher
- D. subscriber
- E. primary
Answer: A,B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-
0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_010.html
NEW QUESTION # 99
......
300-715 Dumps - Pass Your Certification Exam: https://vceplus.actualtestsquiz.com/300-715-test-torrent.html
