Question 1

An administrator is manually adding a device to a Cisco ISE identity group to ensure that it is able to access the network when needed without authentication Upon testing, the administrator notices that the device never hits the correct authorization policy line using the condition EndPoints LogicalProfile EQUALS static_list Why is this occurring?

AThe dynamic logical profile is overriding the statically assigned profile

BThe device is changing identity groups after profiling instead ot remaining static

CThe logical profile is being statically assigned instead of the identity group

DThe identity group is being assigned instead of the logical profile

Answer : C

Question 2

An engineer is creating a new authorization policy to give the endpoints access to VLAN 310 upon successful authentication The administrator tests the 802.1X authentication for the endpoint and sees that it is authenticating successfully What must be done to ensure that the endpoint is placed into the correct VLAN?

AConfigure the switchport access vlan 310 command on the switch port

BEnsure that the security group is not preventing the endpoint from being in VLAN 310

CAdd VLAN 310 in the common tasks of the authorization profile

DEnsure that the endpoint is using The correct policy set

Answer : C

Question 3

Which two authentication protocols are supported by RADIUS but not by TACACS+? (Choose two.)

AMSCHAPv1

BPAP

CEAP

DCHAP

EMSCHAPV2

Answer : C, E

Question 4

What is a difference between RADIUS and TACACS+?

ARADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.

BRADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.

CRADIUS combines authentication and authorization functions, and TACACS+ separates them.

DRADIUS supports command accounting, and TACACS+ does not.

Answer : C

Question 5

An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?

AThe ip ssh source-interface command needs to be set on the switch

B802.1X authentication needs to be configured on the switch.

CThe RSA keypair used for SSH must be regenerated after enabling TACACS+.

DThe switch needs to be added as a network device in Cisco ISE and set to use TACACS+.

Answer : D

Free 300-715 Questions for Cisco 300-715 Exam as PDF & Practice Test Software

Question 1

Question 2

Question 3

Question 4

Question 5