Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones The phones do not have the ability to authenticate via 802 1X.
Which command is needed on each switch port for authentication?
- A . dot1x system-auth-control
- B . enable bypass-mac
- C . enable network-authentication
- D . mab
An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate.
What must be done in order to provide the CA this information?
- A . Install the Root CA and intermediate CA.
- B . Generate the CSR.
- C . Download the intermediate server certificate.
- D . Download the CA server certificate.
An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened. From which Cisco ISE persona should this traffic be originating?
- A . monitoring
- B . policy service
- C . administration
- D . authentication
An engineer is configuring TACACS+ within Cisco ISE for use with a non-Cisco network device. They need to send special attributes in the Access-Accept response to ensure that the users are given the appropriate access.
What must be configured to accomplish this’?
- A . dACLs to enforce the various access policies for the users
- B . custom access conditions for defining the different roles
- C . shell profiles with custom attributes that define the various roles
- D . TACACS+ command sets to provide appropriate access
When planning for the deployment of Cisco ISE, an organization’s security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network.
Why should the engineer configure MAB in this situation?
- A . The Cisco switches only support MAB.
- B . MAB provides the strongest form of authentication available.
- C . The devices in the network do not have a supplicant.
- D . MAB provides user authentication.
An engineer is creating a new authorization policy to give the endpoints access to VLAN 310 upon successful authentication The administrator tests the 802.1X authentication for the endpoint and sees that it is authenticating successfully.
What must be done to ensure that the endpoint is placed into the correct VLAN?
- A . Configure the switchport access vlan 310 command on the switch port
- B . Ensure that the security group is not preventing the endpoint from being in VLAN 310
- C . Add VLAN 310 in the common tasks of the authorization profile
- D . Ensure that the endpoint is using The correct policy set
An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall.
Which two ports should be opened to accomplish this task? (Choose two)
- A . TELNET 23
- B . LDAP 389
- C . HTTP 80
- D . HTTPS 443
- E . MSRPC 445
Which three default endpoint identity groups does cisco ISE create? (Choose three)
- A . Unknown
- B . whitelist
- C . end point
- D . profiled
- E . blacklist
What is the purpose of using the RADIUS protocol in Cisco ISE?
- A . To encrypt entire data payloads
- B . To manage VPN connections
- C . To facilitate device administration
- D . To communicate authentication and authorization policies
Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?
- A . session timeout
- B . idle timeout
- C . radius-server timeout
- D . termination-action