Cisco 300-715 - Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 (300-715 SISE)

Cisco 300-715 Premium Access Download Demo

Page: 7 / 9
Total 299 questions

What is a difference between RADIUS versus TACACS+ with regards to packet encryption?

TACACS+ encrypts the entire body of the packet, and RADIUS encrypts the username and password in the access-request packet.

RADIUS encrypts the entire body of the packet, and TACACS+ encrypts the username and password in the access-request packet.

RADIUS encrypts the entire body of the packet, and TACACS+ encrypts only the password in the access-request packet.

TACACS+ encrypts the entire body of the packet, and RADIUS encrypts only the password in the access-request packet.

Question # 62

An administrator wants to configure network device administration and is trying to decide whether to use TACACS* or RADIUS. A reliable protocol must be used that can check command authorization Which protocol meets these requirements and why?

TACACS+ because it runs over TCP

RADIUS because it runs over UDP

RADIUS because it runs over TCP.

TACACS+ because it runs over UDP

Question # 63

An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs An administrator is adding two more PSNs to this deployment but is having problems adding one of them What is the problem?

The new nodes must be set to primary prior to being added to the deployment

The current PAN is only able to track a max of four nodes

Only five PSNs are allowed to be in the Cisco ISE cube if configured this way.

One of the new nodes must be designated as a pxGrid node

Question # 64

An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers What must be done to accomplish this task?

Create a sponsor portal to allow guests to create accounts using their social media logins.

Create a sponsored guest portal and enable social media in the external identity sources.

Create a self-registered guest portal and enable the feature for social media logins

Create a hotspot portal and enable social media login for network access

Question # 65

An administrator is editing a csv list of endpoints and wants to reprofile some of the devices indefinitely before importing the list into Cisco ISE. Which field and Boolean value must be changed for the devices before the list is reimported?

Identity Group Assignment field and Static Assignment field set to the value FALSE

Policy Assignment field and Static Assignment field set to the value TRUE

Policy Assignment field and Static Assignment field set to the value FALSE

Identity Group Assignment field and Static Assignment field set to the value TRUE

Question # 66

An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

Enable profiling services.

Install SSL certificates.

Create a node group.

Enable session services.

Question # 67

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

personas

qualys

nexpose

posture

Question # 68

An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so What must be done to accomplish this task?

Configure an identity-based access list in Cisco ISE to restrict the users allowed to login

Edit the sponsor portal to only accept members from the selected groups

Modify the sponsor groups assigned to reflect the desired user groups

Create an authorization rule using the Guest Flow condition to authorize the administrators

Question # 69

Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.