300-715試験無料問題集（430題）「Cisco Implementing and Configuring Cisco Identity Services Engine 認定」

出題：1

A security engineer has a new TrustSec projct and must create a few static security group tag classifications as proof of concept. Which two classifications must the engineer configure?
(Choose two.)

A. switch ID

B. interface

C. VLAN

D. MAC address

E. user ID

正解：C,D 解答を投票する

出題：2

A company is attempting to improve their BYOD policies and restrict access based on certain criteria. The company's subnets are organized by building.
Which attribute should be used in order to gain access based on location?

A. device registration status

B. IP address

C. static group assignment

D. MAC address

正解：C 解答を投票する

出題：3

Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two )

A. Device Administration License

B. Server Sequence

C. External TACACS Servers

D. Command Sets

E. Device Admin Service

正解：A,E 解答を投票する

出題：4

An organization has a SGACL locally configured on a switch port, but when a user in the Executives group connects to the network, they receive a different level of network access than expected. When Cisco ISE pushes SGACLs to the switch after the authorization phase, how does the switch decide which access to grant the user?

A. The policies are merged, but local policies receive priority.

B. Dynamically downloaded policies override local policies in all cases.

C. Local policies override dynamically downloaded policies in all cases.

D. The policies are merged, but dynamically downloaded policies receive priority.

正解：D 解答を投票する

出題：5

What is a valid guest portal type?

A. Captive-Guest

B. Sponsor

C. Sponsored-Guest

D. My Devices

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

What is a difference between TACACS+ and RADIUS protocol traffic?

A. TACACS+ supports IP traffic only at the network layer, and RADIUS supports multiple protocols.

B. TACACS+ separates each AAA function, and RADIUS combines authentication and authorization.

C. TACACS+ uses UDP at the transport layer, and RADIUS uses TCP at the transport layer.

D. TACACS+ encrypts passwords only, and RADIUS encrypts the entire packet payload.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

A. SID

B. TGT

C. OMAB

D. MIB

正解：A 解答を投票する

出題：8

An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

A. AnyConnectProfile.xml file

B. Anyconnect compliance module

C. AnyConnectProfile.xsd file

D. Anyconnect agent image

E. Anyconnect network visibility module

正解：B,D 解答を投票する

出題：9

A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication. Which two commands must be entered to meet this requirement? (Choose two)

A. Ip http secure-authentication

B. Ip http secure-server

C. Ip http authentication

D. Ip http server

E. Ip http redirection

正解：B,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

300-715試験無料問題集「Cisco Implementing and Configuring Cisco Identity Services Engine 認定」