300-715 試験問題と解答 - 模擬練習 - 練習問題・模擬試験

Question No : 1
An engineer must create and sign a new certificate for all the portals in a Cisco ISE environment of a company. The company reports that wildcard certificates are blocked in the environment.
Which action must the engineer take before signing the certificate?

A.Add the FQDN of each portal to the SAN field in the CS
B.Create a DNS AAAA record for the FQDN of the Cisco ISE Monitoring node.
C.Create a DNS AAAA record for the FQDN of the Cisco ISE Administration node.
D.Add the FQDN of each portal to the CN field in the CS

正解:

Question No : 2
Which two VMware features are supported on a Cisco ISE virtual appliance? (Choose two.)

A.VM hardware version 7+
B.OVF support
C.VM cold migration
D.multivendor integration
E.VM snapshots

正解:

Question No : 3
A network engineer is configuring a Cisco Wireless LAN Controller in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization policies for profiling.
Which protocol must be configured in the Cisco Wireless LAN Controller to accomplish this task?

A.ICMP
B.DNS
C.CDP
D.DHCP

正解:

Question No : 4
An administrator needs to add a new third party network device to be used with Cisco ISE for Guest and BYOD authorizations.
Which two features must be configured under Network Device Profile to achieve this? (Choose two.)

A.SNMP community
B.TACACS
C.URL Redirect
D.CoA Type
E.dACL

正解:

Question No : 5
A network engineer must configure BYOD using Cisco ISE. In the deployment, the users must be able to submit CSR through the end devices as part of the certificate enrollment process.
Which two features must be enabled to meet the requirement? (Choose two.)

A.A certificate provisioning portal must be configured.
B.Cisco ISE internal CA service must be enabled.
C.A new BYOD portal must be created.
D.Add SuperAdmin account into portal admin group.
E.Define a certificate group tag.

正解:

Question No : 6
An engineer wants to use certificate authentication for endpoints that connect to a wired network integrated with Cisco ISE. The engineer needs to define the certificate field used as the principal username.
Which component would be needed to complete the configuration?

A.authorization rule
B.authentication policy
C.authentication profile
D.authorization profile

正解:

Question No : 7
A network engineer is deploying Cisco ISE in an environment that contains multiple existing Cisco security products. The company needs policy and other user details to be shared between the existing security products and Cisco ISE.
Which Cisco ISE persona must be enabled to collect this data?

A.Policy Service
B.Administration
C.Monitoring
D.NpXGrid

正解:

Question No : 8
Refer to the exhibit.

An engineer must configure the guest access settings in Cisco ISE.
These configurations have been performed already:
• Configure the Wireless LAN Controller and add as a network device in Cisco ISE.
• Create an endpoint identity group and a self-registered guest type.
• Configure SMTP and the registration form to send the credentials via email.
Which two types of profiles must be configured next in Cisco ISE to meet the requirement? (Choose two.)

A.authorization profile to redirect users to the sponsor portal
B.authentication profile to allow internet access
C.authorization profile to redirect users to the guest portal
D.authentication profile to allow guest portal
E.authorization profile to allow internet access

正解:

Question No : 9
On which port does Cisco ISE present the Admin certificate for posture and client provisioning?

A.TCP/8000
B.TCP/8080
C.TCP/8905
D.TCP/8999

正解:

Question No : 10
Which two external identity stores are supported by Cisco ISE for password types? (Choose two.)

A.RADIUS Token Server
B.LDAP
C.TACACS+ Token Server
D.SQL
E.ODBC

正解:

Question No : 11
An engineer is deploying a new Cisco ISE environment for a company. The company wants the deployment to use TACACS+. The engineer verifies that Cisco ISE has a Device Administration license.
What must be configured to enable TACACS+ operations?

A.Device Administration Work Center
B.Device Admin service
C.Device Administration Deployment settings
D.Device Admin Policy Sets settings

正解:

Question No : 12
Which action must be taken before configuring the Secure Client Agent profile when creating the Secure Client configuration for ISE posture services?

A.Configure the posture policy for Secure Client posturing module.
B.Create a posture condition that references the Secure Client package.
C.Create a posture remediation condition policy for the Agent profile.
D.Upload the Secure Client packages and the Secure Client compliance modules.

正解:

Question No : 13
An engineer must configure a Wireless LAN Controller to support CoA by using Cisco ISE.
These configurations have been performed already:
• Run the aaa server radius dynamic-author command on the switch.
• Configure the IP address and secret key of the ISE server on the switch.
• Configure the RADIUS server settings and enable support for CoA on a Wireless LAN Controller.
Which two configuration actions must be performed next on the Wireless LAN Controller? (Choose two.)

A.Enable Allow AAA Override for each WLA
B.Set NAC State to ISE NA
C.Select Static IP Tunneling.
D.Configure the Override Interface AC
E.Enable Management Frame Protection.

正解:

Question No : 14
An engineer is performing a bulk import of printer endpoints into a Cisco ISE local database by using LDAP.
Which LDAP field must be configured to ensure that devices are not profiled as Unknown?

A.MAC Address object Class
B.Device Profile Name
C.Profile Attribute Name
D.MAC Address Profile Class

正解:

Question No : 15
What is used by the CA to issue a certificate to an endpoint?

A.device unique identifier
B.device network address
C.certificate provisioning portal
D.certificate template

正解:

Cisco 300-715 問題練習