CISCO-300-715-D组_在线真题试卷与模拟练习_CISCO-300-715-D组

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Item 137 of 369 (Exam D, Q1)Which platform does a Windows-based device download the Network Assistant from?

Item 79 of 369 (Exam D, Q2)An enterprise uses a separate PSN for each of its four remote sites. Recently, a user reported receiving an EAP-TLS authentication failed message when moving between remote sites.

Which configuration must be applied on Cisco ISE?

Item 204 of 369 (Exam D, Q3)A network engineer received alerts from the monitoring platform that a switch port exists with multiple sessions.

RADIUS COA using Cisco ISE must be used to address the issue.

Which RADIUS COA configuration must be used?

Item 316 of 369 (Exam D, Q4)A network engineer must remove a device that has been whitelisted manually.

How should the engineer remove it from Cisco ISE endpoint database?

Item 216 of 369 (Exam D, Q5)An engineer must create an authentication policy in Cisco ISE to allow wired printers that lack support for 802.1X onto the network.

What must the RadiusFlowType be set to in the policy to meet the requirement?

Item 291 of 369 (Exam D, Q6)An engineer wants to ease the management of endpoint identity groups from the Cisco ISE GUI. From the Identity Management menu in Cisco ISE, the engineer must be able to list the endpoint identity groups with a name that contains Android. Which task must the engineer perform?

Which task must the engineer perform?

Item 259 of 369 (Exam D, Q7)A network engineer must create a guest portal for wireless guests on Cisco ISE. The guest users must not be able to create accounts; however, the portal should require a username and password to connect. Which portal type must be created in Cisco ISE to meet the requirements?

Item 160 of 369 (Exam D, Q8)What is a difference between TACACS+ compared to RADIUS?

Item 189 of 369 (Exam D, Q9)An engineer must use certificate authentication for endpoints that connect to a wired network with a Cisco ISE deployment. The engineer must define the certificate field used as the principal username. What is needed to complete the configuration?

Item 272 of 369 (Exam D, Q11)An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to connect to the network.

Which port-control option must the engineer configure?

Item 226 of 369 (Exam D, Q12)A client with MAC address 04:76:76:79:96:AB connects to the network. The client does not support 802.1X.

A client with MAC address 04:76:76:79:96:AB connects to the network. The client does not support 802.1X.

Which setting must be enabled in the Allowed Authentication Protocols list in your Authentication Policy for Cisco ISE Server to support MAB authentication for this MAC address?

Item 9 of 369 (Exam D, Q13)Which nodes are supported in a distributed Cisco ISE deployment?

Item 326 of 369 (Exam D, Q14)A technician must configure MAB on an access switch. Due to a protocol error, the engineer discovers that MAB cannot authenticate. For MAB to function, which protocol must be enabled in the authorized protocol lists?

Item 123 of 369 (Exam D, Q15)Which controller option allows a user to switch from the provisioning SSID to the employee SSID after registration?

Item 90 of 369 (Exam D, Q16)A network engineer must configure a centralized Cisco ISE solution for wireless guest access with users in different time zones. The guest account activation time must be independent of the user time zone, and the guest account must be enabled automatically when the user self-registers on the guest portal. Which option in the time profile settings must be selected to meet the requirement?

Item 247 of 369 (Exam D, Q18)A network engineer is configuring a Cisco WLC in order to find out more information about the devices that are connecting. This information must be sent to Cisco ISE to be used in authorization policies. Which profiling mechanism must be configured in the Cisco WLC to accomplish this task?

Item 362 of 369 (Exam D, Q20)A network administrator is configuring a new access switch to use with Cisco ISE for network access control. There is a need to use a centralized server for the reauthentication timers. What must be configured in order to accomplish this task?

Item 304 of 369 (Exam D, Q21)Which device acts as an authenticator during the 802.1X authentication process?

Item 81 of 369 (Exam D, Q23)A network administrator must restrict sponsor account privileges for managing guest accounts on Cisco ISE for each business unit. The new sponsor account that is being created. Sponsor groups currently exist for each business unit that is being added must be restricted to only managing guest accounts created by sponsors from the same sponsor group.

In which group must the new sponsor account be configured?

Item 51 of 369 (Exam D, Q24)An endpoint with the MAC address 04:84:10:89:46:AB attempts to connect to the network. The security administrator wants to ensure that before authentication, only limited access is provided for services including DHCP and DNS. Full network access is only granted upon successful 802.1X authentication.

Which ISE deployment mode should the administrator configure to meet the requirements?

1 2 3 4

更多题库