Pass 300-715 Exam Guide

Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Questions and Answers

Question 17

An engineer is deploying Cisco ISE in a network that contains an existing Cisco Secure Firewall ASA. The customer requested that Cisco TrustSec be configured so that Cisco ISE and the firewall can share SGT information.

Which protocol must be configured on Cisco ISE to meet the requirement?

Options:

PAC

SXP

RADIUS

pxGrid

Question 18

Which profiling probe collects the user-agent string?

Options:

DHCP

HTTP

NMAP

Question 19

An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?

Options:

The ip ssh source-interface command needs to be set on the switch

802.1X authentication needs to be configured on the switch.

The RSA keypair used for SSH must be regenerated after enabling TACACS+.

The switch needs to be added as a network device in Cisco ISE and set to use TACACS+.

Question 20

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

Options:

The device queries the internal identity store

The Cisco ISE server queries the internal identity store

The device queries the external identity store

The Cisco ISE server queries the external identity store.

The device queries the Cisco ISE authorization server

Summer Certification Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Implementing and Configuring Cisco Identity Services Engine (SISE) v1.1 (300-715 SISE) Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce