Question 1

Which compliance status is set when a matching posture policy has been defined for that endpomt. but all the mandatory requirements during posture assessment are not met?

Options :

A : unauthorized

B : untrusted

C : non-compliant

D : unknown

Answer: C

Question 2

An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access. What must be configured to accomplish this'?

Options :

A : dACLs to enforce the various access policies for the users

B : custom access conditions for defining the different roles

C : shell profiles with custom attributes that define the various roles

D : TACACS+ command sets to provide appropriate access

Answer: C

Question 3

A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE Which command most be issued for this to work?

Options :

A : copy certificate Ise

B : application configure Ise

C : certificate configure Ise

D : Import certificate Ise

Answer: B

Question 4

What is a valid status of an endpoint attribute during the device registration process?

Options :

A : block listed

B : pending

C : unknown

D : DenyAccess

Answer: B

Question 5

Which two methods should a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two )

Options :

A : Random

B : Monthly

C : Daily

D : Imported

E : Known

Answer: A,D

Free 300-715 Mock Exam – Practice Online Confidently

Buying Options: