[2024年06月]更新の300-715問題集で時間限定！無料アクセスせよ！ [Q40-Q60]

[2024年06月]更新の300-715問題集で時間限定！無料アクセスせよ！

300-715問題集で2024年最新のCisco 300-715試験問題

質問 # 40
What are two differences between the RADIUS and TACACS+ protocols'? (Choose two.)

• A. RADIUS offers multiprotocol support, whereas TACACS+ does not
• B. TACACS+uses TCP port 49. whereas RADIUS uses UDP ports 1812 and 1813.
• C. RADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol
• D. RADIUS combines authentication and authorization, whereas TACACS+ does not
• E. RADIUS enables encryption of all the packets, whereas with TACACS+. only the password is encrypted.

正解：B、D

質問 # 41
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

正解：

解説：

Explanation

Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.
This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide

質問 # 42
Which three default endpoint identity groups does Cisco ISE create? (Choose three.)

• A. endpoint
• B. blacklist
• C. unknown
• D. profiled
• E. whitelist

正解：B、C、D

解説：
Section: Profiler
Explanation/Reference: https://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ ise10_man_identities.html#wp1203054

質問 # 43
Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

正解：

解説：

Explanation

Monitoring = provides advanced monitoring and troubleshooting tools that you can use to effectively manage your network and resources Policy Service = provides network access, posture, guest access, client provisioning, and profiling services.
This persona evaluates the policies and makes all the decisions.
Administration = manages all system-related configuration and configurations that relate to functionality such as authentication, authorization, auditing, and so on pxGrid = shares context-sensitive information from Cisco ISE to subscribers
https://www.cisco.com/c/en/us/td/docs/security/ise/1-4/admin_guide/b_ise_admin_guide_14/b_ise_admin_guide

質問 # 44
Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two )

• A. Command Sets
• B. External TACACS Servers
• C. Device Administration License
• D. Server Sequence
• E. Device Admin Service

正解：C、E

質問 # 45
Which term refers to an endpoint agent that tries to join an 802 1X-enabled network?

• A. client
• B. supplicant
• C. EAP server
• D. authenticator

正解：B

解説：
Reference:
https://www.oreilly.com/library/view/cisco-ise-for/9780133103632/ch16.html#:~:text=What%20is%20a%20supplicant%3F,networks%2C%20both%20wired%20and%20wireless.&text=The%20802.1X%20transactions%20are,Identity%20Services%20Engine%20(ISE).

質問 # 46
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?

• A. subject alternative name and the common name
• B. user-presented password hash and a hash stored in Active Directory
• C. user-presented certificate and a certificate stored in Active Directory
• D. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory

正解：A

解説：
Section: Policy Enforcement
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/1-3/ISE-ADIntegrationDoc/b_ISE- ADIntegration.html

質問 # 47
An organization wants to standardize the 802 1X configuration on their switches and remove static ACLs on the switch ports while allowing Cisco ISE to communicate to the switch what access to provide What must be configured to accomplish this task?

• A. extended access-list on the switch for the client
• B. security group tag within the authorization policy
• C. dynamic access list within the authorization profile
• D. port security on the switch based on the client's information

正解：B

解説：
Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_sga_pol.html#

質問 # 48
Refer to the exhibit.

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server Which two commands should be run to complete the configuration? (Choose two)

• A. ip device tracking
• B. aaa authorization auth-proxy default group radius
• C. dot1x system-auth-control
• D. radius-server attribute 8 include-in-access-req
• E. radius server vsa sand authentication

正解：D、E

質問 # 49
Which are two characteristics of TACACS+? (Choose two ) ,

• A. It separates authorization and authentication functions.
• B. It combines authorization and authentication functions.
• C. It uses UDP port 49.
• D. It uses TCP port 49.
• E. It encrypts the password only.

正解：A、D

質問 # 50
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

• A. termination-action
• B. session timeout
• C. radius-server timeout
• D. idle timeout

正解：D

解説：
When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the inactivity timer expires, the switch removes the authenticated session. The inactivity timer for MAB can be statically configured on the switch port, or it can be dynamically assigned using the RADIUS Idle-Timeout attribute

質問 # 51
What must be configured on the WLC to configure Central Web Authentication using Cisco ISE and a WLC?

• A. Set the NAC State option to SNMP NAC.
• B. Use the radius-server vsa send authentication command.
• C. Use the ip access-group webauth in command.
• D. Set the NAC State option to RADIUS NAC.

正解：D

質問 # 52
Which two actions must be verified to confirm that the internet is accessible via guest access when configuring a guest portal? (Choose two.)

• A. The guest device has internal network access on the WLAN.
• B. The guest device can connect to network file shares.
• C. The guest device successfully associates with the correct SSID.
• D. Cisco ISE sends a CoA upon successful guest authentication.
• E. The guest user gets redirected to the authentication page when opening a browser.

正解：D、E

質問 # 53
Which three conditions can be used for posture checking? (Choose three.)

• A. operating system
• B. application
• C. service
• D. file
• E. certificate

正解：B、C、D

質問 # 54
What is a difference between RADIUS and TACACS+?

• A. RADIUS offers multiprotocol support, and TACACS+ supports only IP traffic.
• B. RADIUS combines authentication and authorization functions, and TACACS+ separates them.
• C. RADIUS uses connection-oriented transport, and TACACS+ uses best-effort delivery.
• D. RADIUS supports command accounting, and TACACS+ does not.

正解：B

質問 # 55
An engineer is using Cisco ISE and configuring guest services to allow wireless devices to access the network.
Which action should accomplish this task?

• A. Create the redirect ACL on Cisco ISE and add it to the Cisco ISE Policy
• B. Create the redirect ACL on the WLC and add it to the Cisco ISE policy.
• C. Create the redirect ACL on the WLC and add it to the WLC policy
• D. Create the redirect ACL on Cisco ISE and add it to the WLC policy

正解：B

質問 # 56
A network administrator must configura endpoints using an 802 1X authentication method with EAP identity certificates that are provided by the Cisco ISE When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network Which EAP type must be configured by the network administrator to complete this task?

• A. EAP-FAST
• B. EAP-TTLS
• C. EAP-TLS
• D. EAP-PEAP-MSCHAPv2

正解：C

解説：
https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/certificate-requirements-eap-tls-peap about EAP FAST
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/eap-fast/200322-Understanding-EAP-FAST-and-Chaining-imp.html

質問 # 57
An engineer is configuring Cisco ISE and needs to dynamically identify the network endpoints and ensure that endpoint access is protected.
Which service should be used to accomplish this task?

• A. guest access
• B. client provisioning
• C. profiling
• D. posture

正解：C

解説：
Section: Profiler
Explanation

質問 # 58
What is a function of client provisioning?

• A. Client provisioning ensures an application process is running on the endpoint.
• B. Client provisioning ensures that endpoints receive the appropriate posture agents.
• C. Client provisioning checks a dictionary attribute with a value.
• D. Client provisioning checks the existence, date, and versions of the file on a client.

正解：A

質問 # 59
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

• A. termination-action
• B. session timeout
• C. radius-server timeout
• D. idle timeout

正解：D

解説：
Reference:
When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the inactivity timer expires, the switch removes the authenticated session. The inactivity timer for MAB can be statically configured on the switch port, or it can be dynamically assigned using the RADIUS Idle-Timeout attribute

質問 # 60
......

Cisco 300-715試験実践テスト問題：https://jp.fast2test.com/300-715-premium-file.html

最新の無料300-715別格問題集をダウンロード：https://drive.google.com/open?id=1v103FXQw5hboWUipBPQ3PbelY7toKFKg