1. Home
  2. Cisco
  3. 300-715

Implementing and Configuring Cisco Identity Services Engine (SISE)

Exam Details

  • Exam Code
    :300-715
  • Exam Name
    :Implementing and Configuring Cisco Identity Services Engine (SISE)
  • Certification
    :CCNP Security
  • Vendor
    :Cisco
  • Total Questions
    :404 Q&As
  • Last Updated
    :Apr 06, 2025

Cisco CCNP Security 300-715 Questions & Answers

  • Question 291:

    Which of these is not a method to obtain Cisco ISE profiling data?

    A. RADIUS

    B. HTTP

    C. SNMP query

    D. active scans

    E. Netflow

    F. DNS

  • Question 292:

    A network engineer must enforce access control using special tags without re- engineering the network design, which feature should be configured to achieve this in a scalable manner?

    A. RBAC

    B. VLAN

    C. SGT

    D. dACL

  • Question 293:

    Which statement is true?

    A. A Cisco ISE Advanced license is perpetual in nature.

    B. A Cisco ISE Advanced license can be installed on top of a Base and/or Wireless license.

    C. A Cisco ISE Wireless license can be installed on top of a Base and/or Advanced license.

    D. A Cisco ISE Advanced license can be used without any Base licenses.

  • Question 294:

    A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed interface. Which command should be used to accomplish this task?

    A. cts authorization list

    B. cts role-based enforcement

    C. cts cache enable

    D. cts role-based policy priority-static

  • Question 295:

    An engineer is using the low-impact mode of phased deployment of cisco ISE and is trying to connect to the network prior to the authentication, which access will be denied in this deployment?

    A. DNS

    B. DHCP

    C. HTTP

    D. EAP

  • Question 296:

    An engineer is configuring a virtual cisco ISE deployment and needs each persona to be on a different node. Which persona should be configured with the largest amount of storage in this environment?

    A. Monitoring and troubleshooting

    B. Policy Service

    C. Primary administration

    D. Platform Exchange grid

  • Question 297:

    An engineer is configuring cisco ISE and need to dynamically identify the network endpoints and ensure that endpoint access is protected. Which service should be used to accomplish this task?

    A. Guest access

    B. Profiling

    C. Posture

    D. Client provisioning

  • Question 298:

    A customer is concerned with the use of the issued laptops even when devices are not on the corporate network. Which agent continues to be operational even when the host is not on the Cisco ISE network?

    A. Cisco ISE Agent

    B. Cisco NAC Agent

    C. Cisco Custom Agent

    D. Cisco NAC Web Agent

  • Question 299:

    In which two ways can users and endpoints be classified for TrustSec? (Choose Two.)

    A. VLAN

    B. SXP

    C. dynamic

    D. QoS

    E. SGACL

  • Question 300:

    Which types of design are required in the Cisco ISE ATP program?

    A. schematic and detailed

    B. preliminary and final

    C. high-level and low-level designs

    D. top down and bottom up

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 300-715 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.