300-715

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two)A . TACACS+ supports 802.1X, and RADIUS supports MABB . TACACS+ uses UDP, and RADIUS uses TCPC . TACACS+ has command authorization, and RADIUS does not.D . TACACS+ provides the service type, and RADIUS does notE . TACACS+...

Which interface-level command is needed to turn on 802 1X authentication?A . Dofl1x pae authenticatorB . dot1x system-auth-controlC . authentication host-mode single-hostD . aaa server radius dynamic-authorView AnswerAnswer: A

Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?A . show authentication sessions outputB . Show authentication sessionsC . show authentication sessions interface Gi 1/0/xD . show authentication sessions interface Gi1/0/x outputView AnswerAnswer: B

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?A . Network Access ControlB . My Devices PortalC . Application Visibility and ControlD . Supplicant Provisioning WizardView AnswerAnswer: B

Which profiling probe collects the user-agent string?A . DHCPB . ADC . HTTPD . NMAPView AnswerAnswer: C

What does the dot1x system-auth-control command do?A . causes a network access switch not to track 802.1x sessionsB . globally enables 802.1xC . enables 802.1x on a network access device interfaceD . causes a network access switch to track 802.1x sessionsView AnswerAnswer: B Explanation: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/XE3-8-0E/15-24E/configuration/guide/xe-380-configuration/dot1x.html

How is policy services node redundancy achieved in a deployment?A . by enabling VIPB . by utilizing RADIUS server list on the NADC . by creating a node groupD . by deploying both primary and secondary nodeView AnswerAnswer: D

What gives Cisco ISE an option to scan endpoints for vulnerabilities?A . authorization policyB . authentication policyC . authentication profileD . authorization profileView AnswerAnswer: D

What service can be enabled on the Cisco ISE node to identity the types of devices connecting to a network?A . MABB . profilingC . postureD . central web authenticationView AnswerAnswer: B

What are two components of the posture requirement when configuring Cisco ISE posture? (Choose two)A . updatesB . remediation actionsC . Client Provisioning portalD . conditionsE . access policyView AnswerAnswer: BD