Cisco CCNP Security 300-715 Questions & Answers

• Question 351:

  What is the purpose of the ip http server command on a switch?

  A. It enables the https server for users for web authentication

  B. It enables MAB authentication on the switch

  C. It enables the switch to redirect users for web authentication.

  D. It enables dot1x authentication on the switch.

  Correct Answer: C

• Question 352:

  A user reports that the RADIUS accounting packets are not being seen on the Cisco ISE server. Which command is the user missing in the switch's configuration?

  A. radius-server vsa send accounting

  B. aaa accounting network default start-stop group radius

  C. aaa accounting resource default start-stop group radius

  D. aaa accounting exec default start-stop group radios

  Correct Answer: B

• Question 353:

  A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

  A. Keep track of guest user activities

  B. Configure authorization settings for guest users

  C. Create and manage guest user accounts

  D. Authenticate guest users to Cisco ISE

  Correct Answer: C

• Question 354:

  Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two )

  A. Random

  B. Monthly

  C. Daily

  D. Imported

  E. Known

  Correct Answer: AD

• Question 355:

  During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

  A. Cisco App Store

  B. Microsoft App Store

  C. Cisco ISE directly

  D. Native OTA functionality

  Correct Answer: C

• Question 356:

  In which two ways can users and endpoints be classified for TrustSec?

  (Choose Two.)

  A. VLAN

  B. SXP

  C. dynamic

  D. QoS

  E. SGACL

  Correct Answer: AC

• Question 357:

  Which two ports do network devices typically use for CoA? (Choose two )

  A. 443

  B. 19005

  C. 8080

  D. 3799

  E. 1700

  Correct Answer: DE

• Question 358:

  What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

  A. Cisco-av-pair

  B. Class attribute

  C. Event

  D. State attribute

  Correct Answer: A

• Question 359:

  Which two values are compared by the binary comparison function in authentication that is based on Active Directory? (Choose 2)

  A. subject alternative name and the common name

  B. MS-CHAFV2 provided machine credentials and credentials stored in Active Directory

  C. user-presented password hash and a hash stored in Active Directory

  D. user-presented certificate and a certificate stored in Active Directory

  Correct Answer: AD

• Question 360:

  Which configuration is required in the Cisco ISE authentication policy to allow Central Web Authentication?

  A. MAB and if user not found, continue

  B. MAB and if authentication failed, continue

  C. Dot1x and if user not found, continue

  D. Dot1x and if authentication failed, continue

  Correct Answer: A