Question 1

An administrator must deploy the Cisco Secure Client posture agent to employee endpoints that access a wireless network by using URL redirection in Cisco ISE. The compliance module must be downloaded from Cisco and uploaded to the Cisco ISE client provisioning resource. What must be used to upload the compliance module?

Options :

A : Secure Client configuration

B : agent resources from the local disk

C : Secure Client posture profile

D : Client Provisioning Portal

Answer: B

Question 2

What must match between Cisco ISE and the network access device to successfully authenticate endpoints?

Options :

A : SNMP version

B : shared secret

C : certificate

D : profile

Answer: B

Question 3

An engineer is adding a new network device to be used with 802.1X authentication. After configuring the device, the engineer notices that no endpoints that connect to the switch are able to authenticate. What is the problem?

Options :

A : The command dot1x system-auth-control is not configured on the switch.

B : The switch’s supplicant is unable to establish a connection to Cisco ISE.

C : The command dot1x critical vlan 40 is not configured on the switch ports.

D : The endpoint firewalls are blocking the EAPoL traffic.

Answer: A

Question 4

A client with MAC address 04:77:10:14:67:AB connects to the network. The client does not support 802.1X. Which setting must be enabled in the Allowed Authentication Protocols list in your Authentication Policy for Cisco ISE Server to support MAB authentication for this MAC address?

Options :

A : Process Host Lookup

B : EAP-FAST

C : EAP-TTLS

D : MS-CHAPv2

Answer: A

Question 5

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

Options :

A : DHCP server

B : static IP tunneling

C : override Interface ACL

D : AAA override

Answer: D

Free 300-715 Mock Exam – Practice Online Confidently

Buying Options: