Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine Exam Exam Practice Test Questions

• Question 1

  What are two differences of TACACS+ compared to RADIUS? (Choose two.)

  • TACACS+ uses a connectionless transport protocol, whereas RADIUS uses a connection-oriented transport protocol.
  • TACACS+ encrypts the full packet payload, whereas RADIUS only encrypts the password.
  • TACACS+ only encrypts the password, whereas RADIUS encrypts the full packet payload.
  • TACACS+ uses a connection-oriented transport protocol, whereas RADIUS uses a connectionless transport protocol.
  • TACACS+ supports multiple sessions per user, whereas RADIUS supports one session per user.

  Show Answer Answer: B, D Next

• Question 2

  An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

  • NetFlow probe
  • DNS probe
  • DHCP probe
  • SNMP query probe

  Show Answer Answer: C Next

• Question 3

  Which statement about configuring certificates for BYOD is true?

  • An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment
  • The SAN field is populated with the end user name.
  • An endpoint certificate is mandatory for the Cisco ISE BYOD
  • The CN field is populated with the endpoint host name

  Show Answer Answer: C Next

• Question 4

  While configuring Cisco TrustSec on Cisco IOS devices the engineer must set the CTS device ID and password in order for the devices to authenticate with each other. However after this is complete the devices are not able to property authenticate What issue would cause this to happen even if the device ID and passwords are correct?

  • The device aliases are not matching
  • The 5GT mappings have not been defined
  • The devices are missing the configuration cts credentials trustsec verify 1
  • EAP-FAST is not enabled

  Show Answer Answer: B Next

• Question 5

  Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

  • Hotspot
  • New AD user 802 1X authentication
  • Posture
  • BYOD
  • Guest AUP

  Show Answer Answer: B, C Next