300-715 Free Exam Questions & Answers PDF Updated on Aug-2023 [Q31-Q46]

QUESTION 31
What is the condition that a Cisco ISE authorization policy cannot match?

QUESTION 32
Which use case validates a change of authorization?

QUESTION 33
A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice. Which command should the engineer run on the interface to accomplish this goal?

QUESTION 34
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

QUESTION 35
Drag and Drop Question
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

QUESTION 36
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

QUESTION 37
An organization wants to improve their BYOD processes to have Cisco ISE issue certificates to the BYOD endpoints. Currently, they have an active certificate authority and do not want to replace it with Cisco ISE.
What must be configured within Cisco ISE to accomplish this goal?

QUESTION 38
What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node ,s deregistered?

QUESTION 39
A network engineer must enforce access control using special tags, without re-engineering the network design.
Which feature should be configured to achieve this in a scalable manner?

QUESTION 40
What are two components of the posture requirement when configuring Cisco ISE posture?
(Choose two )

QUESTION 41
An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list Why is this occurring?

QUESTION 42
The default (standalone) Cisco ISE node configuration has which role or roles enabled by default?

QUESTION 43
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

QUESTION 44
Which portal is used to customize the settings for a user to log in and download the compliance module?

QUESTION 45
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

QUESTION 46
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two)