300-715 Exam - Free Actual Q&As, Page 1

Topic 1 - Single Topic

Question #1 Topic 1

Which personas can a Cisco ISE node assume?

A. policy service, gatekeeping, and monitoring
B. administration, monitoring, and gatekeeping
C. administration, policy service, and monitoring
D. administration, policy service, gatekeeping

Reveal Solution Discussion 9

Correct Answer: C 🗳️
Reference:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

Question #2 Topic 1

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

A. The secondary node restarts.
B. The primary node restarts.
C. Both nodes restart.
D. The primary node becomes standalone.

Reveal Solution Discussion 27

Correct Answer: C 🗳️

Question #3 Topic 1

DRAG DROP -
Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the right.
Select and Place:

Reveal Solution Discussion 1

Correct Answer:
Reference:
https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_dis_deploy.html

Question #4 Topic 1

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

A. new AD user 802.1X authentication
B. hotspot
C. posture
D. guest AUP
E. BYOD

Reveal Solution Discussion 22

Correct Answer: BD 🗳️

Question #5 Topic 1

Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

A. Cisco Secure Services Client and Cisco Access Control Server
B. Cisco AnyConnect NAM and Cisco Identity Service Engine
C. Cisco AnyConnect NAM and Cisco Access Control Server
D. Windows Native Supplicant and Cisco Identity Service Engine

Reveal Solution Discussion 6

Correct Answer: B 🗳️
Reference:
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/eap-fast/200322-Understanding-EAP-FAST-and-Chaining-imp.html

Question #6 Topic 1

What is a requirement for Feed Service to work?

A. TCP port 8080 must be opened between Cisco ISE and the feed server.
B. Cisco ISE has access to an internal server to download feed update.
C. Cisco ISE has a base license.
D. Cisco ISE has Internet access to download feed update.

Reveal Solution Discussion 22

Correct Answer: B 🗳️

Question #7 Topic 1

What is a method for transporting security group tags throughout the network?

A. by embedding the security group tag in the 802.1Q header
B. by the Security Group Tag Exchange Protocol
C. by enabling 802.1AE on every network device
D. by embedding the security group tag in the IP header

Reveal Solution Discussion 1

Correct Answer: B 🗳️

Question #8 Topic 1

An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?

A. Monitoring and Troubleshooting
B. Policy Services
C. Primary Administration
D. Platform Exchange Grid

Reveal Solution Discussion 9

Correct Answer: A 🗳️

Question #9 Topic 1

In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)

A. subscriber
B. primary
C. administration
D. publisher
E. policy service

Reveal Solution Discussion 6

Correct Answer: CE 🗳️

Question #10 Topic 1

A network engineer must enforce access control using special tags, without re-engineering the network design.
Which feature should be configured to achieve this in a scalable manner?

A. RBAC
B. dACL
C. SGT
D. VLAN

Reveal Solution Discussion 2

Correct Answer: C 🗳️
Reference:
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/trustsec/branch-segmentation.pdf

Cisco 300-715 Exam Actual Questions

The questions for 300-715 were last updated on July 8, 2024.

Topic 1 - Single Topic

Get IT Certification

New Version GCP Professional Cloud Architect Certificate & Helpful Information

The 5 Most In-Demand Project Management Certifications of 2019