[2024年06月09日]300-715認定ガイド問題と解答トレーニング [Q24-Q39]

[2024年06月09日]300-715認定ガイド問題と解答トレーニング

300-715認定お試しセット最新300-715のPDF問題集

Cisco 300-715試験は、経験豊富なネットワークセキュリティの専門家向けに設計されたCCNPセキュリティ認証トラックの一部です。この試験では、Cisco ISEの基本、ネットワークアクセスポリシー、ネットワークアクセスセキュリティ、プロファイリング、姿勢、ゲストアクセスサービスなど、幅広いトピックをカバーしています。この試験では、Cisco ISEの他のセキュリティソリューションとの統合に関する候補者の理解と、Cisco ISEに関連する一般的な問題をトラブルシューティングする能力もテストしています。

 

質問 # 24
What are two components of the posture requirement when configuring Cisco ISE posture?
(Choose two )

• A. access policy
• B. updates
• C. conditions
• D. Client Provisioning portal
• E. remediation actions

正解：C、E

質問 # 25
Which of the following is not true about profiling in Cisco ISE?

• A. Cisco ISE does not support hierarchy within the profiling policy.
• B. Cisco ISE comes with predefined profiles.
• C. The use of Identity Groups is required to leverage the use of profiling in the authorization policy.
• D. Profiling policies are automatically enabled for use.

正解：A

質問 # 26
A network administrator changed a Cisco ISE deployment from pilot to production and noticed that the JVM memory utilization increased significantly. The administrator suspects this is due to replication between the nodes What must be configured to minimize performance degradation?

• A. Enable the endpoint attribute filter
• B. Review the profiling policies for any misconfiguration
• C. Ensure that Cisco ISE is updated with the latest profiler feed update
• D. Change the reauthenticate interval.

正解：A

解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_010111.html

質問 # 27
If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

• A. TCP 21
• B. UDP123
• C. TCP 445
• D. UDP/TCP 389
• E. TCP 88

正解：A

質問 # 28
Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?

• A. Windows Native Supplicant and Cisco Identity Service Engine
• B. Cisco AnyConnect NAM and Cisco Access Control Server
• C. Cisco AnyConnect NAM and Cisco Identity Service Engine
• D. Cisco Secure Services Client and Cisco Access Control Server

正解：C

質問 # 29
Which two events trigger a CoA for an endpoint when CoA is enabled globally for ReAuth? (Choose two.)

• A. endpoint marked as lost in My Devices Portal
• B. endpoint profile transition from Unknown to Windows 10-Workstation
• C. addition of endpoint to My Devices Portal
• D. endpoint profile transition from Aop.e-dev.ee to Apple-iPhone
• E. updating of endpoint dACL.

正解：B、D

質問 # 30
What does MAB stand for?

• A. MAC Authorization Binding
• B. MAC Authentication Bypass
• C. MAC Authorization Bypass
• D. MAC Address Binding

正解：B

質問 # 31
Which two default endpoint identity groups does cisco ISE create? (Choose two )

• A. whitelist
• B. end point
• C. Unknown
• D. blacklist
• E. profiled

正解：C、D、E

解説：
Default Endpoint Identity Groups Created for Endpoints Cisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, RegisteredDevices, and Unknown. In addition, it creates two more identity groups, such as Cisco-IP-Phone and Workstation, which are associated to the Profiled (parent) identity group. A parent group is the default identity group that exists in the system.
https://www.cisco.com/c/en/us/td/docs/security/ise/2-
4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_010101.html#ID16
78

質問 # 32
Which interface-level command is needed to turn on 802 1X authentication?

• A. dot1x system-auth-control
• B. Dofl1x pae authenticator
• C. authentication host-mode single-host
• D. aaa server radius dynamic-author

正解：A

質問 # 33
An administrator is configuring a Cisco ISE posture agent in the client provisioning policy and needs to ensure that the posture policies that interact with clients are monitored, and end users are required to comply with network usage rules Which two resources must be added in Cisco ISE to accomplish this goal? (Choose two)

• A. Supplicant
• B. PEAP
• C. AnyConnect
• D. Cisco ISE NAC
• E. Posture Agent

正解：C、E

解説：
Explanation
https://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect40/administration/guide/b_An
https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ISE_admin_guide_24/m_configure_clien

質問 # 34
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?

• A. My Devices Portal
• B. Network Access Control
• C. Supplicant Provisioning Wizard
• D. Application Visibility and Control

正解：A

質問 # 35
Which statement about configuring certificates for BYOD is true?

• A. The SAN field is populated with the end user name.
• B. An endpoint certificate is mandatory for the Cisco ISE BYOD
• C. The CN field is populated with the endpoint host name
• D. An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment

正解：B

質問 # 36
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

• A. Authentication fails.
• B. Authentication is redirected to the external identity source.
• C. Authentication is redirected to the internal identity source.
• D. Authentication is granted.

正解：A

質問 # 37
A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate Signing Request and signs the request using an external Certificate Authority server. Which certificate usage option must be selected when importing the certificate into ISE?

• A. DLTS
• B. Admin
• C. RADIUS
• D. Portal

正解：D

質問 # 38
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

• A. Authentication is granted.
• B. Authentication is redirected to the external identity source.
• C. Authentication fails.
• D. Authentication is redirected to the internal identity source.

正解：A

質問 # 39
......

ベストCisco 300-715学習ガイドと問題集は2024：https://jp.fast2test.com/300-715-premium-file.html

トップクラスCisco 300-715試験最先端学習ガイド！練習問題バージョン：https://drive.google.com/open?id=1wuplOC7d9IhZ1qXa7M7F4n7CzkBiFHzR