300-715 Dumps

300-715 Free Practice Test

Cisco 300-715: Implementing and Configuring Cisco Identity Services Engine (SISE)

QUESTION 36

Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

Correct Answer: B
When the inactivity timer is enabled, the switch monitors the activity from authenticated endpoints. When the inactivity timer expires, the switch removes the authenticated session. The inactivity timer for MAB can be statically configured on the switch port, or it can be dynamically assigned using the RADIUS Idle-Timeout attribute

QUESTION 37

When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

Correct Answer: D

QUESTION 38

What are the minimum requirements for deploying the Automatic Failover feature on Administration nodes in a distributed Cisco ISE deployment?

Correct Answer: D

QUESTION 39

What are two requirements of generating a single signing in Cisco ISE by using a certificate provisioning portal, without generating a certificate request? (Choose two )

Correct Answer: BD
https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/200534-ISE-2-0-Certificate-Provi

QUESTION 40

An administrator wants to configure network device administration and is trying to decide whether to use TACACS* or RADIUS. A reliable protocol must be used that can check command authorization Which protocol meets these requirements and why?

Correct Answer: A