Question 1

Which interface-level command is needed to turn on 802 1X authentication?

Options :

A : Dofl1x pae authenticator

B : dot1x system-auth-control

C : authentication host-mode single-host

D : aaa server radius dynamic-author

Answer: A

Question 2

An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

Options :

A : Install SSL certificates

B : Create a node group

C : Enable profiling services

D : Enable session services

Answer: D

Question 3

An administrator is configuring posture assessment in Cisco ISE for the first time. Which two components must be uploaded to Cisco ISE to use Anyconnect for the agent configuration in a client provisioning policy? (Choose two.)

Options :

A : Anyconnect network visibility module

B : Anyconnect compliance module

C : AnyConnectProfile.xml file

D : AnyConnectProfile.xsd file

E : Anyconnect agent image

Answer: B,E

Question 4

An engineer is assigned to enhance security across the campus network. The task is to enable MAB across all access switches in the network. Which command must be entered on the switch to enable MAB?

Options :

A : Switch(config-if)# mab

B : Switch(config)# mab

C : Switch# authentication port-control auto

D : Switch(config)# authentication port-control auto

Answer: A

Question 5

A network engineer must enforce access control using special tags, without re-engineering the network design. Which feature should be configured to achieve this in a scalable manner?

Options :

A : SGT

B : dACL

C : VLAN

D : RBAC

Answer: A

Free 300-715 Mock Exam – Practice Online Confidently

Buying Options: