CISCO-300-715-D组_在线真题试卷与模拟练习_CISCO-300-715-D组

更新时间：试题数量：购买人数：提供作者：

有效期：个月

章节介绍：共有个章节

我的练习

我的错题
(0道)

我的收藏
(0道)

我的斩题
(0道)

我的笔记
(0道)

专项练习

顺序练习 0 / 0

随机练习 自定义设置练习量

题型乱序 按导入顺序练习

模拟考试 仿真模拟

题型练习 按题型分类练习

易错题 精选高频易错题

学习资料 考试学习相关信息

搜索

题库预览

Item 109 of 369 (Exam D, Q26)What is a difference between TACACS+ compared to RADIUS from an AAA perspective?

Item 288 of 369 (Exam D, Q27)

Refer to the exhibit.

An engineer needs to configure central web authentication on the Cisco Wireless LAN Controller to use Cisco ISE for all guests connected to the wireless network. The components are configured:

- Cisco Wireless LAN Controller

- Cisco ISE

- authentication profile on the Cisco ISE

- authorization rule on the Cisco ISE

What must be configured next on the Cisco ISE?

（含图）

Item 35 of 369 (Exam D, Q30)What is the default port used by Cisco ISE for NetFlow version 9 probe?

Item 60 of 369 (Exam D, Q31)An engineer configures Cisco ISE and Cisco Catalyst switches to enforce Cisco TrustSec policies. The engineer must use a nondisruptive deployment approach for new devices by deploying TrustSec policies in staging, preproduction, and production.

Which action must be taken to complete the configuration?

Item 112 of 369 (Exam D, Q32)An administrator must deploy the Cisco Secure Client posture agent to employee endpoints that access a wireless network URL redirection in Cisco ISE. The compliance module must be downloaded from Cisco and uploaded to the Cisco ISE client provisioning resource.What must be used to upload the compliance module?

Item 88 of 369 (Exam D, Q35)An engineer is starting to implement a wired 802.1X project throughout the campus to Cisco ISE and also have a minimal impact on the users.

Item 134 of 369 (Exam D, Q37)A network engineer must configure a policy rule to check the endpoint. The policy must ensure disk encryption is enabled and the appropriate antivirus software version is installed. Which configuration must the engineer apply to the rule?

Item 344 of 369 (Exam D, Q38)What is a primary function of RADIUS compared to TACACS?

Item 12 of 369 (Exam D, Q39)Which persona configuration feature is used when setting personas in Cisco ISE for a node that will give network access and receive RADIUS requests?

Item 281 of 369 (Exam D, Q40)An engineer is assigned to enhance security across the campus network. The task is to enable MAB across all access switches in the network. Which command must be entered on the switch to enable MAB?

Item 302 of 369 (Exam D, Q41)An engineer is configuring a new Cisco ISE node. The Cisco ISE must make authorization decisions based on the threat and vulnerability attributes received from the threat and vulnerability adapters. Which persona must be enabled?

Item 17 of 369 (Exam D, Q43)Which Cisco ISE feature enables administrators to enroll a certificate to an endpoint with MAC address 00:92:42:57:11:AA without the need for an external PKI?

Item 185 of 369 (Exam D, Q44)An engineer is configuring a new Cisco ISE node. Context-sensitive information must be shared between the Cisco ISE and a Cisco ASA. Which persona must be enabled?

Item 312 of 369 (Exam D, Q45)Which additional port must be opened to allow communication between the firewall, Controller and the Cisco ISE?

（含图）

Item 154 of 369 (Exam D, Q46)An engineer is deploying Cisco ISE in a network that contains an existing Cisco Secure Firewall ASA. The customer requested that Cisco TrustSec be configured so that Cisco ISE and the firewall can share SGT information. Which protocol must be configured on Cisco ISE to meet the requirement?

Item 228 of 369 (Exam D, Q48)An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages related to unknown posture profiles if Cisco ISE fails to determine the posture of the endpoint. Secure Client is deployed to all the endpoints, and all the required Cisco ISE authentication, authorization, and posture policy configurations were performed. Which action must be taken next to complete the configuration?

Item 132 of 369 (Exam D, Q49)An engineer is deploying Cisco ISE into an existing wireless environment for a hospital. The requirement from the customer is that the WLC use Cisco ISE for Central Web Authentication. The company also has a Cisco MSE that is used with the WLC to restrict access to patient records over wireless to the room of the patient only. Which option must be selected in the Authorization Profile on Cisco ISE to support the integration?

Item 91 of 369 (Exam D, Q50)A network security administrator must integrate Cisco ISE with Active Directory. The administrator must carry out a join operation. Which action must the security administrator take?

Item 330 of 369 (Exam D, Q51)An administrator must onboard MacOS endpoints that connect to Cisco switches using the BYOD portal in Cisco ISE. The authentication method must be configured to meet these requirements:

- Cisco ISE identifies itself by providing its identity certificate to the endpoint.

- The endpoint validates the Cisco ISE identity certificate.

- The endpoint provides its endpoint identity certificate, signed by Cisco ISE, to Cisco ISE.

- Cisco ISE confirms the endpoint certificate validity, and the endpoint is authorized onto the network.

Which protocol must be configured?

Item 64 of 369 (Exam D, Q52)Which component of the 802.1X authentication process provides the identity credentials and communicates using EAP at Layer 2?

1 2 3 4

更多题库