Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
Which two values are compared by the binary comparison (unction in authentication that is based on Active Directory?
- A . subject alternative name and the common name
- B . MS-CHAPv2 provided machine credentials and credentials stored in Active Directory
- C . user-presented password hash and a hash stored in Active Directory
- D . user-presented certificate and a certificate stored in Active Directory
An administrator has added a new Cisco ISE PSN to their distributed deployment.
Which two features must the administrator enable to accept authentication requests and profile the endpoints correctly, and add them to their respective endpoint identity groups? (Choose two)
- A . Session Services
- B . Endpoint Attribute Filter
- C . Posture Services
- D . Profiling Services
- E . Radius Service
What role does Cisco TrustSec play within Cisco ISE?
- A . It encrypts traffic between nodes.
- B . It segments the network based on security policies.
- C . It provides VPN services.
- D . It deploys antivirus software on endpoints.
What is a method for transporting security group tags throughout the network?
- A . by enabling 802.1AE on every network device
- B . by the Security Group Tag Exchange Protocol
- C . by embedding the security group tag in the IP header
- D . by embedding the security group tag in the 802.1Q header
A user is attempting to register a BYOD device to the Cisco ISE deployment, but needs to use the onboarding policy to request a digital certificate and provision the endpoint.
What must be configured to accomplish this task?
- A . A native supplicant provisioning policy to redirect them to the BYOD portal for onboarding
- B . The Cisco AnyConnect provisioning policy to provision the endpoint for onboarding
- C . The BYOD flow to ensure that the endpoint will be provisioned prior to registering
- D . The posture provisioning policy to give the endpoint all necessary components prior to registering
An engineer wants to learn more about Cisco ISE and deployed a new lab with two nodes.
Which two persona configurations allow the engineer to successfully test redundancy of a failed node? (Choose two.)
- A . Configure one of the Cisco ISE nodes as the Health Check node.
- B . Configure both nodes with the PAN and MnT personas only.
- C . Configure one of the Cisco ISE nodes as the primary PAN and MnT personas and the other as the secondary.
- D . Configure both nodes with the PAN, MnT, and PSN personas.
- E . Configure one of the Cisco ISE nodes as the primary PAN and PSN personas and the other as the secondary.
What is a function of client provisioning?
- A . Client provisioning ensures that endpoints receive the appropriate posture agents.
- B . Client provisioning checks a dictionary attribute with a value.
- C . Client provisioning ensures an application process is running on the endpoint.
- D . Client provisioning checks the existence, date, and versions of the file on a client.
Which are two characteristics of TACACS+? (Choose two)
- A . It uses TCP port 49.
- B . It combines authorization and authentication functions.
- C . It separates authorization and authentication functions.
- D . It encrypts the password only.
- E . It uses UDP port 49.
What is the maximum number of PSN nodes supported in a medium-sized deployment?
- A . three
- B . five
- C . two
- D . eight
An adminístrator is migrating device administration access to Cisco ISE from the legacy TACACS+
solution that used only privilege 1 and 15 access levels. The organization requires more granular controls of the privileges and wants to customize access levels 2-5 to correspond with different roles and access needs.
Besides defining a new shell profile in Cisco ISE. what must be done to accomplish this configuration?
- A . Enable the privilege levels in Cisco ISE
- B . Enable the privilege levels in the IOS devices.
- C . Define the command privileges for levels 2-5 in the IOS devices
- D . Define the command privileges for levels 2-5 in Cisco ISE