Cisco CCNP Security 300-715 Questions & Answers

• Question 341:

  Which supplicant(s) and server(s) are capable of supporting EAR-CHAINING?

  A. Cisco AnyConnect NAM and Cisco Identity Service Engine

  B. Cisco AnyConnect NAM and Cisco Access Control Server

  C. Cisco Secure Services Client and Cisco Access Control Server

  D. Windows Native Supplicant and Cisco Identity Service Engine

  Correct Answer: A

• Question 342:

  Which protocol must be allowed for a BYOD device to access the BYOD portal?

  A. HTTP

  B. SMTP

  C. HTTPS

  D. SSH

  Correct Answer: C

• Question 343:

  Which portal is used to customize the settings for a user to log in and download the compliance module?

  A. Client Profiling

  B. Client Endpoint

  C. Client Provisioning

  D. Client Guest

  Correct Answer: C

• Question 344:

  What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

  A. SNMP version

  B. shared secret

  C. certificate

  D. profile

  Correct Answer: B

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_network_devices.html

• Question 345:

  How is policy services node redundancy achieved in a deployment?

  A. by enabling VIP

  B. by utilizing RADIUS server list on the NAD

  C. by creating a node group

  D. by deploying both primary and secondary node

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/Workflow/b_deployment_2_4.html

• Question 346:

  Refer to the exhibit:

  

  Which command is typed within the CLI of a switch to view the troubleshooting output?

  A. show authentication sessions mac 000e.84af.59af details

  B. show authentication registrations

  C. show authentication interface gigabitethemet2/0/36

  D. show authentication sessions method

  Correct Answer: A

• Question 347:

  Which two probes must be enabled for the ARP cache to function in the Cisco ISE profile service so that a user can reliably bind the IP address and MAC addresses of endpoints? (Choose two.)

  A. NetFlow

  B. SNMP

  C. HTTP

  D. DHCP

  E. RADIUS

  Correct Answer: DE

  Cisco ISE implements an ARP cache in the profiling service, so that you can reliably map the IP addresses and the MAC addresses of endpoints. For the ARP cache to function, you must enable either the DHCP probe or the RADIUS probe. The DHCP and RADIUS probes carry the IP addresses and the MAC addresses of endpoints in the payload data. The dhcp-requested address attribute in the DHCP probe and the Framed-IP-address attribute in the RADIUS probe carry the IP addresses of endpoints, along with their MAC addresses, which can be mapped and stored in the ARP cache.

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

• Question 348:

  Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two )

  A. Windows Settings

  B. Connection Type

  C. iOS Settings

  D. Redirect ACL

  E. Operating System

  Correct Answer: BE

  https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010101.html#reference_21024A3B2B27427EAC78495E56962729

• Question 349:

  What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

  A. pass

  B. reject

  C. drop

  D. continue

  Correct Answer: D

  https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html

• Question 350:

  What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)

  A. updates

  B. remediation actions

  C. Client Provisioning portal

  D. conditions

  E. access policy

  Correct Answer: BD