Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine (SISE) Online Training

Cisco 300-715 Online Training

The questions for 300-715 were last updated at Oct 24,2025.

Exam Code: 300-715
Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
Certification Provider: Cisco
Latest update: Oct 24,2025

Question #71

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)

A . The device queries the internal identity store
B . The Cisco ISE server queries the internal identity store
C . The device queries the external identity store
D . The Cisco ISE server queries the external identity store.
E . The device queries the Cisco ISE authorization server

Question #72

When planning for the deployment of Cisco ISE, an organization’s security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network.

Why should the engineer configure MAB in this situation?

A . The Cisco switches only support MAB.
B . MAB provides the strongest form of authentication available.
C . The devices in the network do not have a supplicant.
D . MAB provides user authentication.

Reveal Solution Hide Solution

Question #73

In a Cisco ISE split deployment model, which load is split between the nodes?

A . AAA
B . network admission
C . log collection
D . device admission

Reveal Solution Hide Solution

Question #74

An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication.

Which command should be used to complete this configuration?

A . dot1x pae authenticator
B . dot1x system-auth-control
C . authentication port-control auto
D . aaa authentication dot1x default group radius

Reveal Solution Hide Solution

Question #75

Which two default endpoint identity groups does Cisco ISE create? (Choose two)

A . block list
B . endpoint
C . profiled
D . allow list
E . unknown

Reveal Solution Hide Solution

Correct Answer: C, E
C, E

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

Default Endpoint Identity Groups Created for EndpointsCisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, RegisteredDevices, and Unknown. In addition, it creates two more identity groups, such as Cisco-IP-Phone and Workstation, which are associated to the Profiled (parent) identity group. A parent group is the default identity group that exists in the system.

Cisco ISE creates the following endpoint identity groups:

✑ Blacklist―This endpoint identity group includes endpoints that are statically assigned to this group in Cisco ISE and endpoints that are block listed in the device registration portal. An authorization profile can be defined in Cisco ISE to permit, or deny network access to endpoints in this group.

✑ GuestEndpoints―This endpoint identity group includes endpoints that are used by guest users.

✑ Profiled―This endpoint identity group includes endpoints that match endpoint profiling policies except Cisco IP phones and workstations in Cisco ISE.

✑ RegisteredDevices―This endpoint identity group includes endpoints, which are registered devices that are added by an employee through the devices registration portal. The profiling service continues to profile these devices normally when they are assigned to this group. Endpoints are statically assigned to this group in Cisco ISE, and the profiling service cannot reassign them to any other identity group. These devices will appear like any other endpoint in the endpoints list. You can edit, delete, and block these devices that you added through the device registration portal from the endpoints list in the Endpoints page in Cisco ISE. Devices that you have blocked in the device registration portal are assigned to the Blacklist endpoint identity group, and an authorization profile that exists in Cisco ISE redirects blocked devices to a URL, which displays “Unauthorised Network Access”, a default portal page to the blocked devices.

✑ Unknown―This endpoint identity group includes endpoints that do not match any profile in Cisco ISE.

In addition to the above system created endpoint identity groups, Cisco ISE creates the following endpoint identity groups, which are associated to the Profiled identity group:

✑ Cisco-IP-Phone―An identity group that contains all the profiled Cisco IP phones on your network.

✑ Workstation―An identity group that contains all the profiled workstations on your network.

Previous Questions

Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine (SISE) Online Training

Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine (SISE) Online Training

Cisco 300-715 Online Training

The questions for 300-715 were last updated at Oct 24,2025.

Latest 300-715 Dumps Valid Version with 152 Q&As

Related Posts