Demo Preview

300-715 SISE Safe Question Preview

This public preview shows limited demo-safe questions only. Correct answers, full explanations, paid-only media, private IDs, and attempt data are not included.

Policy EnforcementWeb Auth and Guest ServicesProfilerArchitecture and DeploymentMultiple ChoiceMulti Select
Start Interactive DemoExam Landing Page

Preview Questions

Multiple ChoicePolicy Enforcement
Question 1. An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?
A. HTTP
B. DNS
C. EAP
D. DHCP
Open safe question previewReport Question
Multiple ChoiceWeb Auth and Guest Services
Question 2. A Cisco ISE administrator needs to ensure that guest endpoint registrations are only valid for 1 day. When testing the guest policy flow, the administrator sees that the Cisco ISE does not delete the endpoint in the Guest Endpoints identity store after one day and allows access to the guest network after that period. Which configuration is causing this problem?
A. The RADIUS policy set for guest access is set to allow repeated authentication of the same device.
B. The length of access is set to 7 days in the Guest Portal Settings.
C. The Endpoint Purge Policy is set to 30 days for guest devices.
D. The Guest Account Purge Policy is set to 15 days.
Open safe question previewReport Question
Multiple ChoiceProfiler
Question 3. An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?
A. NetFlow probe
B. DNS probe
C. DHCP probe
D. SNMP query probe
Open safe question previewReport Question
Multi SelectWeb Auth and Guest Services
Question 4. Using the SAK Active Directory Federation Services server. The configurations were performed: • created a new SAML Identity provider profile in Cisco ISE • exported the service provider Information • configured all the required Active Directory Federation Services configurations • Imported the Active Directory Federation Services metadata • configured groups in the new SAML identity • added attributes to the new SAML identity provider profile • configured Advanced Settings in the new SAML identity provider profile Which two actions must be taken to complete the configuration? (Choose two.)
A. Allow Kerberos single sign-on on the Sponsor portal.
B. Configure the Sponsor portal HTTPS port for Active Directory Federation Services integration.
C. Customize the Sponsor portal pages for Integration with Active Directory Federation Services.
D. Add SAML identity provider groups in Sponsor Group Members.
E. Configure an identity source sequence in the Sponsor portal.
Open safe question previewReport Question
Multiple ChoiceArchitecture and Deployment
Question 5. Which permission is common to the Active Directory Join and Leave operations?
A. Create a Cisco ISE machine account in the domain if the machine account does not already exist
B. Remove the Cisco ISE machine account from the domain.
C. Set attributes on the Cisco ISE machine account
D. Search Active Directory to see if a Cisco ISE machine account already ex.sts.
Open safe question previewReport Question