Question 1

A network administrator notices that after a company-wide shut down, many users cannot connect their laptops to the corporate SSID. What must be done to permit access in a timely manner?

Options :

A : Authenticate the user-s system to the secondary Cisco ISE node and move this user to the primary with the renewed certificate.

B : Connect this system as a guest user and then redirect the web auth protocol to log in to the network.

C : Add a certificate issue from the CA server, revoke the expired certificate, and add the new certificate in system.

D : Allow authentication for expired certificates within the EAP-TLS section under the allowed protocols.

Answer: D

Question 2

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

Options :

A : Keep track of guest user activities

B : Configure authorization settings for guest users

C : Create and manage guest user accounts

D : Authenticate guest users to Cisco ISE

Answer: C

Question 3

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

Options :

A : The primary node restarts

B : The secondary node restarts.

C : The primary node becomes standalone

D : Both nodes restart.

Answer: D

Question 4

An engineer is configuring Cisco ISE policies to support MAB for devices that do not have 802.1X capabilities. The engineer is configuring new endpoint identity groups as conditions to be used in the AuthZ policies, but noticed that the endpoints are not hitting the correct policies. What must be done in order to get the devices into the right policies?

Options :

A : Manually add the MAC addresses of the devices to endpoint ID groups in the context visibility database.

B : Create an AuthZ policy to identify Unknown devices and provide partial network access prior to profiling.

C : Add an identity policy to dynamically add the IP address of the devices to their endpoint identity groups.

D : Identify the non 802.1 * supported device types and create custom profiles for them to profile into.

Answer: A

Question 5

An administrator is configuring sponsored guest access using Cisco ISE Access must be restricted to the sponsor portal to ensure that only necessary employees can issue sponsored accounts and employees must be classified to do so What must be done to accomplish this task?

Options :

A : Configure an identity-based access list in Cisco ISE to restrict the users allowed to login

B : Edit the sponsor portal to only accept members from the selected groups

C : Modify the sponsor groups assigned to reflect the desired user groups

D : Create an authorization rule using the Guest Flow condition to authorize the administrators

Answer: C

Free 300-715 Mock Exam – Practice Online Confidently

Buying Options: