300-715 Free Practice Test

An engineer is configuring Cisco ISE for guest services They would like to have any unregistered guests redirected to the guest portal for authentication then have a CoA provide them with full access to the network that is segmented via firewalls Why is the given configuration failing to accomplish this goal?

1. A. The Guest Flow condition is not in the line that gives access to the quest portal
2. B. The Network_Access_Authentication_Passed condition will not work with guest services for portal access.
3. C. The Permit Access result is not set to restricted access in its policy line
4. D. The Guest Portal and Guest Access policy lines are in the wrong order

Correct Answer: D

An organization is migrating its current guest network to Cisco ISE and has 1000 guest users in the current database There are no resources to enter this information into the Cisco ISE database manually. What must be done to accomplish this task effciently?

1. A. Use a CSV file to import the guest accounts
2. B. Use SOL to link me existing database to Ctsco ISE
3. C. Use a JSON fie to automate the migration of guest accounts
4. D. Use an XML file to change the existing format to match that of Cisco ISE

Correct Answer: A

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue. Which two requirements must be met to implement this change? (Choose two.)

1. A. Enable IPC access over port 80.
2. B. Ensure that the NAT address is properly configured
3. C. Establish access to one Global Catalog server.
4. D. Provide domain administrator access to Active Directory.
5. E. Configure a secure LDAP connection.

Correct Answer: CD

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the endpoints on the network. Which node should be used to accomplish this task?

1. A. PSN
2. B. primary PAN
3. C. pxGrid
4. D. MnT

Correct Answer: A

During a 802 1X deployment, an engineer must identify failed authentications without causing problems for the connected endpoint. Which command will successfully achieve this''

1. A. dot1x system-auth-control
2. B. dot1x pae authenticator
3. C. authentication open
4. D. authentication port-control auto

Correct Answer: C