300-715 Free Practice Test

Which are two characteristics of TACACS+? (Choose two)

1. A. It uses TCP port 49.
2. B. It combines authorization and authentication functions.
3. C. It separates authorization and authentication functions.
4. D. It encrypts the password only.
5. E. It uses UDP port 49.

Correct Answer: AC

An administrator made changes in Cisco ISE and needs to apply new permissions for endpoints that have already been authenticated by sending a CoA packet to the network devices. Which IOS command must be configured on the devices to accomplish this goal?

1. A. aaa server radius dynamic-author
2. B. authentication command bounce-port
3. C. authentication command disable-port
4. D. aaa nas port extended

Correct Answer: A

An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

1. A. MDM
2. B. Client provisioning
3. C. My devices
4. D. BYOD

Correct Answer: C
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide

Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node'?

1. A. radius-server timeout
2. B. session-timeout
3. C. idle-timeout
4. D. termination-action

Correct Answer: C

An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

1. A. Port Bounce
2. B. Port Shutdown
3. C. Session Termination
4. D. Session Reauthentication

Correct Answer: D