無料300-715サンプル問題で100%カバー率のリアル試験問題（更新された240問あります) [Q41-Q57]

無料300-715サンプル問題で100%カバー率のリアル試験問題（更新された240問あります)

今すぐダウンロード！リアルCisco 300-715試験問題集テストエンジン試験問題

シスコ300-715試験は、シスコISEソリューションの実装と設定に関するスキルと知識を検証する難しい認定試験です。ネットワークセキュリティに特化したITプロフェッショナルがキャリアアップするために必要な認定資格です。試験に合格することで、シスコISEを使用してネットワークアクセスを保護し、デバイスを管理し、ポリシーを強制する能力を証明します。

質問 # 41
A user changes the status of a device to stolen in the My Devices Portal of Cisco ISE. The device was originally onboarded in the BYOD wireless Portal without a certificate. The device is found later, but the user cannot re-onboard the device because Cisco ISE assigned the device to the Blocklist endpoint identity group. What must the user do in the My Devices Portal to resolve this issue?

A. Delete the device, and then re-add the device.
B. Change the BYOD registration attribute of the device to None.
C. Manually remove the device from the Blocklist endpoint identity group.
D. Change the device state from Stolen to Not Registered.

正解：D

質問 # 42
What is a function of client provisioning?

A. It checks the existence date and versions of the file on a client.
B. It checks a dictionary' attribute with a value.
C. It ensures that endpoints receive the appropriate posture agents
D. It ensures an application process is running on the endpoint.

正解：C

質問 # 43
An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

A. Client provisioning
B. My devices
C. BYOD
D. MDM

正解：B

解説：
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide

質問 # 44
Which two default endpoint identity groups does cisco ISE create? (Choose two )

A. blacklist
B. profiled
C. Unknown
D. whitelist
E. end point

正解：A、B

解説：
Explanation
Default Endpoint Identity Groups Created for EndpointsCisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, RegisteredDevices, and Unknown. In addition, it creates two more identity groups, such as Cisco-IP-Phone and Workstation, which are associated to the Profiled (parent) identity group. A parent group is the default identity group that exists in the system.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide

質問 # 45
Refer to the exhibit:

Refer to the exhibit Which component must be configured to apply the SGACL?

A. secure server
B. host
C. egress router
D. ingress router

正解：C

解説：
https://www.cisco.com/c/en/us/td/docs/switches/lan/trustsec/configuration/guide/trustsec/arch_over.html#52796

質問 # 46
An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?

A. custom access conditions for defining the different roles
B. dACLs to enforce the various access policies for the users
C. shell profiles with custom attributes that define the various roles
D. TACACS+ command sets to provide appropriate access

正解：C

質問 # 47
Which two responses from the RADIUS server to NAS are valid during the authentication process? (Choose two )

A. access-challenge
B. access-response
C. access-accept
D. access-reserved
E. access-request

正解：C、E

質問 # 48
MacOS users are complaining about having to read through wordy instructions when remediating their workstations to gam access to the network Which alternate method should be used to tell users how to remediate?

A. message text
B. executable
C. file distribution
D. URL link

正解：D

質問 # 49
Select and Place

正解：

解説：

質問 # 50
Refer to the exhibit.

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server Which two commands should be run to complete the configuration? (Choose two)

A. radius server vsa sand authentication
B. radius-server attribute 8 include-in-access-req
C. dot1x system-auth-control
D. ip device tracking
E. aaa authorization auth-proxy default group radius

正解：A、D

質問 # 51
A company is attempting to improve their BYOD policies and restrict access based on certain criteri a. The company's subnets are organized by building. Which attribute should be used in order to gain access based on location?

A. IP address
B. static group assignment
C. device registration status
D. MAC address

正解：C

質問 # 52
A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task?

A. EAP-TLS
B. EAP-TTLS
C. LEAP
D. EAP-MD5
E. PEAP

正解：A、D

質問 # 53
What is the Cisco ISE default admin login name and password?

A. admin/cisco
B. admin/no default password--the admin password is configured at setup
C. ISEAdmin/admin
D. admin/admin

正解：B

質問 # 54
An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?

A. Create one shell profile and multiple command sets.
B. Create multiple shell profiles and one command set
C. Create one shell profile and one command set.
D. Create multiple shell profiles and multiple command sets.

正解：D

解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_0100010.html
https://www.youtube.com/watch?v=IlZwB71Szog&ab_channel=JasonMaynard

質問 # 55
A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed interface.
Which command should be used to accomplish this task?

A. cts role-based enforcement
B. cts cache enable
C. cts authorization list
D. cts role-based policy priority-static

正解：A

解説：
Section: Architecture and Deployment

質問 # 56
An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right.