300-715 Free Practice Test

Which use case validates a change of authorization?

1. A. An authenticated, wired EAP-capable endpoint is discovered
2. B. An endpoint profiling policy is changed for authorization policy.
3. C. An endpoint that is disconnected from the network is discovered
4. D. Endpoints are created through device registration for the guests

Correct Answer: B
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two)

1. A. TELNET 23
2. B. LDAP 389
3. C. HTTP 80
4. D. HTTPS 443
5. E. MSRPC 445

Correct Answer: BE

An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so What must be done to accomplish this task?

1. A. Configure an identity-based access list in Cisco ISE to restrict the users allowed to login
2. B. Edit the sponsor portal to only accept members from the selected groups
3. C. Modify the sponsor groups assigned to reflect the desired user groups
4. D. Create an authorization rule using the Guest Flow condition to authorize the administrators

Correct Answer: C

An administrator replaced a PSN in the distributed Cisco ISE environment. When endpoints authenticate to it, the devices are not getting the right profiles or attributes and as a result, are not hitting the correct policies. This was working correctly on the previous PSN. Which action must be taken to ensure the endpoints get identified?

1. A. Verify that the MnT node is tracking the session.
2. B. Verify the shared secret used between the switch and the PSN.
3. C. Verify that the profiling service is running on the new PSN.
4. D. Verify that the authentication request the PSN is receiving is not malformed.

Correct Answer: C

A company is attempting to improve their BYOD policies and restrict access based on certain criteria. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

1. A. static group assignment
2. B. IP address
3. C. device registration status
4. D. MAC address

Correct Answer: A
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_