300-715 Free Practice Test

A company manager is hosting a conference. Conference participants must connect to an open guest SSID and only use a preassigned code that they enter into the guest portal prior to gaining access to the network. How should the manager configure Cisco ISE to accomplish this goal?

1. A. Create entries in the guest identity group for all participants.
2. B. Create an access code to be entered in the AUP page.
3. C. Create logins for each participant to give them sponsored access.
4. D. Create a registration code to be entered on the portal splash page.

Correct Answer: B

What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?

1. A. MAB
2. B. profiling
3. C. posture
4. D. central web authentication

Correct Answer: B

An engineer needs to configure a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes. Which option must be selected in the Subject Alternative Name field?

1. A. Common Name and GUID
2. B. MAC Address and GUID
3. C. Distinguished Name
4. D. Common Name

Correct Answer: B
The engineer needs to select the option of MAC Address and GUID in the Subject Alternative Name field when configuring a new certificate template in the Cisco ISE Internal Certificate Authority to prevent BYOD devices from needing to re-enroll when their MAC address changes.

Which default endpoint identity group does an endpoint that does not match any profile in Cisco ISE become a member of?

1. A. Endpoint
2. B. unknown
3. C. blacklist
4. D. white list
5. E. profiled

Correct Answer: B
If you do not have a matching profiling policy, you can assign an unknown profiling policy. The endpoint is therefore profiled as Unknown. The endpoint that does not match any profile is grouped within the Unknown identity group. The endpoint profiled to the Unknown profile requires that you create a profile with an attribute or a set of attributes collected for that endpoint.
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_identities.html

What does the dot1x system-auth-control command do?

1. A. causes a network access switch not to track 802.1x sessions
2. B. globally enables 802.1x
3. C. enables 802.1x on a network access device interface
4. D. causes a network access switch to track 802.1x sessions

Correct Answer: B
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380