350-701 Free Practice Test

- (Exam Topic 3)
A Cisco ISE engineer configures Central Web Authentication (CWA) for wireless guest access and must have the guest endpoints redirect to the guest portal for authentication and authorization. While testing the policy, the engineer notices that the device is not redirected and instead gets full guest access. What must be done for the redirect to work?

1. A. Tag the guest portal in the CWA part of the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.
2. B. Use the track movement option within the authorization profile for the authorization policy line that the unauthenticated devices hit.
3. C. Create an advanced attribute setting of Cisco:cisco-gateway-id=guest within the authorization profile for the authorization policy line that the unauthenticated devices hit.
4. D. Add the DACL name for the Airespace ACL configured on the WLC in the Common Tasks section of the authorization profile for the authorization policy line that the unauthenticated devices hit.

Correct Answer: D

- (Exam Topic 3)
Which cloud service offering allows customers to access a web application that is being hosted, managed, and maintained by a cloud service provider?

1. A. IaC
2. B. SaaS
3. C. IaaS
4. D. PaaS

Correct Answer: B

- (Exam Topic 3)
When network telemetry is implemented, what is important to be enabled across all network infrastructure devices to correlate different sources?

1. A. CDP
2. B. NTP
3. C. syslog
4. D. DNS

Correct Answer: B

- (Exam Topic 3)
Which two configurations must be made on Cisco ISE and on Cisco TrustSec devices to force a session to be adjusted after a policy change is made? (Choose two)

1. A. posture assessment
2. B. aaa authorization exec default local
3. C. tacacs-server host 10.1.1.250 key password
4. D. aaa server radius dynamic-author
5. E. CoA

Correct Answer: DE

- (Exam Topic 3)
An engineer is implementing DHCP security mechanisms and needs the ability to add additional attributes to profiles that are created within Cisco ISE Which action accomplishes this task?

1. A. Define MAC-to-lP address mappings in the switch to ensure that rogue devices cannot get an IP address
2. B. Use DHCP option 82 to ensure that the request is from a legitimate endpoint and send the information to Cisco ISE
3. C. Modify the DHCP relay and point the IP address to Cisco ISE.
4. D. Configure DHCP snooping on the switch VLANs and trust the necessary interfaces

Correct Answer: D