Question 1

Which Cisco ISE service allows an engineer to check the compliance of endpoints before connecting to the network?

Options :

A : personas

B : qualys

C : nexpose

D : posture

Answer: D

Question 2

A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE Which command most be issued for this to work?

Options :

A : copy certificate Ise

B : application configure Ise

C : certificate configure Ise

D : Import certificate Ise

Answer: B

Question 3

An engineer is designing a BYOD environment utilizing Cisco ISE for devices that do not support native supplicants Which portal must the security engineer configure to accomplish this task?

Options :

A : MDM

B : Client provisioning

C : My devices

D : BYOD

Answer: C

Question 4

Which Cisco ISE module contains a list of vendor names, product names, and attributes provided by OPSWAT?

Options :

A : Compliance Module

B : Client Provisioning Module

C : Endpoint Security Module

D : Posture Module

Answer: A

Question 5

An administrator replaced a PSN in the distributed Cisco ISE environment. When endpoints authenticate to it, the devices are not getting the right profiles or attributes and as a result, are not hitting the correct policies.

This was working correctly on the previous PSN. Which action must be taken to ensure the endpoints get identified?

Options :

A : Verify that the MnT node is tracking the session.

B : Verify the shared secret used between the switch and the PSN.

C : Verify that the profiling service is running on the new PSN.

D : Verify that the authentication request the PSN is receiving is not malformed.

Answer: C

Free 300-715 Mock Exam – Practice Online Confidently

Buying Options: