Free Access Cisco.300-715.v2022-06-13.q160 Practice Test (Page 12)

Question 51

Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue. Which two requirements must be met to implement this change? (Choose two.)

A.Ensure that the NAT address is properly configured

B.Configure a secure LDAP connection.

C.Enable IPC access over port 80.

D.Establish access to one Global Catalog server.

E.Provide domain administrator access to Active Directory.

Question 52

An administrator is configuring posture with Cisco ISE and wants to check that specific services are present on the workstations that are attempting to access the network. What must be configured to accomplish this goal?

A.Create an application posture condition using a OPSWAT API version.

B.Create a service posture condition using a non-OPSWAT API version.

C.Create a compound posture condition using a OPSWAT API version.

D.Create a registry posture condition using a non-OPSWAT API version.

Question 53

An engineer builds a five-node distributed Cisco ISE deployment The first two deployed nodes are responsible for the primary and secondary administration and monitoring personas Which persona configuration is necessary to have the remaining three Cisco ISE nodes serve as dedicated nodes in the Cisco ISE cube that is responsible only for handling the RADIUS and TACACS+ authentication requests, identity lookups, and policy evaluation?
A)

A.Option B

B.Option A

C.Option D

D.Option C

Question 54

Which two endpoint compliance statuses are possible? (Choose two.)

A.compliant

B.valid

C.unknown

D.known

E.invalid

Question 55

Which two default endpoint identity groups does Cisco ISE create? (Choose two )

A.block list

B.endpoint

C.profiled

D.allow list

E.unknown

Correct Answer: C,E

Explanation
https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide Default Endpoint Identity Groups Created for EndpointsCisco ISE creates the following five endpoint identity groups by default: Blacklist, GuestEndpoints, Profiled, RegisteredDevices, and Unknown. In addition, it creates two more identity groups, such as Cisco-IP-Phone and Workstation, which are associated to the Profiled (parent) identity group. A parent group is the default identity group that exists in the system.
Cisco ISE creates the following endpoint identity groups:
* Blacklist-This endpoint identity group includes endpoints that are statically assigned to this group in Cisco ISE and endpoints that are block listed in the device registration portal. An authorization profile can be defined in Cisco ISE to permit, or deny network access to endpoints in this group.
* GuestEndpoints-This endpoint identity group includes endpoints that are used by guest users.
* Profiled-This endpoint identity group includes endpoints that match endpoint profiling policies except Cisco IP phones and workstations in Cisco ISE.
* RegisteredDevices-This endpoint identity group includes endpoints, which are registered devices that are added by an employee through the devices registration portal. The profiling service continues to profile these devices normally when they are assigned to this group. Endpoints are statically assigned to this group in Cisco ISE, and the profiling service cannot reassign them to any other identity group.
These devices will appear like any other endpoint in the endpoints list. You can edit, delete, and block these devices that you added through the device registration portal from the endpoints list in the Endpoints page in Cisco ISE. Devices that you have blocked in the device registration portal are assigned to the Blacklist endpoint identity group, and an authorization profile that exists in Cisco ISE redirects blocked devices to a URL, which displays "Unauthorised Network Access", a default portal page to the blocked devices.
* Unknown-This endpoint identity group includes endpoints that do not match any profile in Cisco ISE.
In addition to the above system created endpoint identity groups, Cisco ISE creates the following endpoint identity groups, which are associated to the Profiled identity group:
* Cisco-IP-Phone-An identity group that contains all the profiled Cisco IP phones on your network.
* Workstation-An identity group that contains all the profiled workstations on your network.

Other Version: 181Cisco.300-715.v2026-05-06.q227; 2992Cisco.300-715.v2023-08-15.q196; 1913Cisco.300-715.v2023-04-05.q117; 1924Cisco.300-715.v2023-03-03.q81; 4286Cisco.300-715.v2022-01-26.q162; 40Cisco.Trainingdump.300-715.v2021-11-07.by.maximilian.119q.pdf

Latest Upload: 132Databricks.Databricks-Generative-AI-Engineer-Associate.v2026-08-18.q40; 145SAP.C_CR125_2601.v2026-08-17.q28; 182Salesforce.Field-Service-Consultant.v2026-08-17.q134; 151Oracle.1Z0-1170.v2026-08-16.q64; 158Oracle.1Z1-1170.v2026-08-16.q64; 194Juniper.JN0-336.v2026-08-13.q60; 327EMC.NCP-AII.v2026-08-13.q200; 209CIRO.RSE.v2026-08-12.q41; 175CrowdStrike.CCSE-204.v2026-08-12.q50; 163ISQI.CT-GenAI.v2026-08-11.q14

Question 51

Question 52

Question 53

Question 54

Question 55

Download PDF File