300-715 Self-Study Guide for Becoming an Implementing and Configuring Cisco Identity Services Engine Expert [Q173-Q190]

Q173. An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication.
Which access will be denied in this deployment?

Q174. An engineer wants to use certificate authentication for endpoints that connect to a wired network integrated with Cisco ISE. The engineer needs to define the certificate field used as the principal username. Which component would be needed to complete the configuration?

Q175. What is the difference between how RADIUS and TACACS+ handle encryption?

Q176. What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

Q177. Drag the Cisco ISE node types from the left onto the appropriate purposes on the right.

Q178. Drag the steps to configure a Cisco ISE node as a primary administration node from the left into the correct order on the night.

Q179. Drag the descriptions on the left onto the components of 802.1X on the right.

Q180. Which Cisco ISE module contains a list of vendor names, product names, and attributes provided by OPSWAT?

Q181. Which two default endpoint identity groups does cisco ISE create? (Choose two )

Q182. An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

Q183. An administrator needs to give the same level of access to the network devices when users are logging into them using TACACS+ However, the administrator must restrict certain commands based on one of three user roles that require different commands How is this accomplished without creating too many objects using Cisco ISE?

Q184. An organization is implementing Cisco ISE posture services and must ensure that a host-based firewall is in place on every Windows and Mac computer that attempts to access the network They have multiple vendors’ firewall applications for their devices, so the engineers creating the policies are unable to use a specific application check in order to validate the posture for this What should be done to enable this type of posture check?

Q185. Which two ports must be open between Cisco ISE and the client when you configure posture on Cisco ISE?
(Choose two).

Q186. A network engineer has been tasked with enabling a switch to support standard web authentication for Cisco ISE. This must include the ability to provision for URL redirection on authentication Which two commands must be entered to meet this requirement? (Choose two)

Q187. How is policy services node redundancy achieved in a deployment?

Q188. An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes. Which two persona configurations allow the engineer to successfully test redundancy of a failed node?
(选择两个）。

Q189. A network administrator changed a Cisco ISE deployment from pilot to production and noticed that the JVM memory utilization increased significantly.
The administrator suspects this is due to replication between the nodes.
What must be configured to minimize performance degradation?

Q190. What are the minimum requirements for deploying the Automatic Failover feature on Administration nodes in a distributed Cisco ISE deployment?