Question 1

What is a restriction of a standalone Cisco ISE node deployment?

Options :

A : Only the Policy Service persona can be disabled on the node.

B : The domain name of the node cannot be changed after installation.

C : Personas are enabled by default and cannot be edited on the node.

D : The hostname of the node cannot be changed after installation.

Answer: C

Question 2

An engineer is configuring sponsored guest access and needs to limit each sponsored guest to a maximum of two devices. There are other guest services in production that rely on the default guest types. How should this configuration change be made without disrupting the other guest services currently offering three or more guest devices per user?

Options :

A : Create an ISE identity group to add users to and limit the number of logins via the group configuration.

B : Create a new guest type and set the maximum number of devices sponsored guests can register

C : Create an LDAP login for each guest and tag that in the guest portal for authentication.

D : Create a new sponsor group and adjust the settings to limit the devices for each guest.

Answer: B

Question 3

Guest users report repeated prompts to authenticate with the portal when connecting to a wireless network. An administrator must configure Cisco ISE to reduce the number of prompts. The solution must meet the requirements:

• Users must be authenticated once.

• When reconnecting to the visitor network, users do not need to be redirected to the login page.

Which action completes the configuration?

Options :

A : Configure an authorization profile to send a redirection access control list only for unauthenticated users.

B : Configure the Wi-Fi Guest Access policy to allow the GuestEndpoint group.

C : Configure an authorization rule for guest flow to bypass authenticated MAC address.

D : Configure an authentication rule for MAC Authentication Bypass users to add an authenticated MAC address in an identity group.

Answer: D

Question 4

An administrator is trying to collect metadata information about the traffic going across the network to gam added visibility into the hosts. This Information will be used to create profiling policies for devices us mg Cisco ISE so that network access policies can be used What must be done to accomplish this task?

Options :

A : Configure the RADIUS profiling probe within Cisco ISE

B : Configure NetFlow to be sent to me Cisco ISE appliance.

C : Configure SNMP to be used with the Cisco ISE appliance

D : Configure the DHCP probe within Cisco ISE

Answer: B

Question 5

An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?

Options :

A : dACLs to enforce the various access policies for the users

B : custom access conditions for defining the different roles

C : shell profiles with custom attributes that define the various roles

D : TACACS+ command sets to provide appropriate access

Answer: C

Higher Test Marks with Free Online 300-715 Exam Practice

Buying Options: