New 2020 CCNP 300-715 SISE exam questions from PassLeader 300-715 dumps! Welcome to download the newest PassLeader 300-715 VCE and PDF dumps: https://www.passleader.com/300-715.html (103 Q&As –> 145 Q&As –> 176 Q&As –> 210 Q&As –> 262 Q&As –> 311 Q&As –> 344 Q&As)
P.S. Free 2020 CCNP 300-715 SISE dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=10mbBp2Z7ri3RGpRaeaLp8R2BTE37if3P
NEW QUESTION 90
Which use case validates a change of authorization?
A. An authenticated, wired EAP-capable endpoint is discovered.
B. An endpoint profiling policy is changed for authorization policy.
C. An endpoint that is disconnected from the network is discovered.
D. Endpoints are created through device registration for the guests.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html
NEW QUESTION 91
An engineer is configuring Cisco ISE to reprofile endpoints based only on new requests of INIT-REBOOT and SELECTING message types. Which probe should be used to accomplish this task?
A. MMAP
B. DNS
C. DHCP
D. RADIUS
Answer: C
NEW QUESTION 92
An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two.)
A. TELNET 23
B. LDAP 389
C. HTTP 80
D. HTTPS 443
E. MSRPC 445
Answer: BE
NEW QUESTION 93
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this?
A. HTTP
B. DNS
C. EAP
D. DHCP
Answer: A
NEW QUESTION 94
A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task? (Choose two.)
A. PEAP
B. EAP-MD5
C. LEAP
D. EAP-TLS
E. EAP-TTLS
Answer: BD
NEW QUESTION 95
An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirement complete this policy? (Choose two.)
A. minimum password length
B. active username limit
C. access code control
D. gpassword expiration period
E. username expiration date
Answer: AD
NEW QUESTION 96
Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two.)
A. The Cisco ISE server queries the internal identity store.
B. The device queries the internal identity store.
C. The device queries the external identity store.
D. The device queries the Cisco ISE authorization server.
E. The Cisco ISE server queries the external identity store.
Answer: BE
NEW QUESTION 97
When planning for the deployment of Cisco ISE, an organization’s security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network. Why should the engineer configure MAB in this situation?
A. The Cisco switches only support MAB.
B. MAB provides the strongest form of authentication available.
C. The devices in the network do not have a supplicant.
D. MAB provides user authentication.
Answer: C
NEW QUESTION 98
In a Cisco ISE split deployment model, which load is split between the nodes?
A. AAA
B. network admission
C. log collection
D. device admission
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26.pdf
NEW QUESTION 99
Which two default endpoint identity groups does Cisco ISE create? (Choose two.)
A. block list
B. endpoint
C. profiled
D. allow list
E. unknown
Answer: CE
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html
NEW QUESTION 100
In a standalone Cisco ISE deployment, which two personas are configured on a node? (Choose two.)
A. publisher
B. administration
C. primary
D. policy service
E. subscriber
Answer: BD
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-0/admin_guide/b_ise_admin_guide_20/b_ise_admin_guide_20_chapter_010.html
NEW QUESTION 101
Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)
A. External TACACS Servers
B. Device Admin Service
C. Device Administration License
D. Server Sequence
E. Command Sets
Answer: BC
NEW QUESTION 102
……
New 2020 CCNP 300-715 SISE exam questions from PassLeader 300-715 dumps! Welcome to download the newest PassLeader 300-715 VCE and PDF dumps: https://www.passleader.com/300-715.html (103 Q&As –> 145 Q&As –> 176 Q&As –> 210 Q&As –> 262 Q&As –> 311 Q&As –> 344 Q&As)
P.S. Free 2020 CCNP 300-715 SISE dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=10mbBp2Z7ri3RGpRaeaLp8R2BTE37if3P
