Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
Refer to the exhibit:
Which command is typed within the CU of a switch to view the troubleshooting output?
- A . show authentication sessions mac 000e.84af.59af details
- B . show authentication registrations
- C . show authentication interface gigabitethemet2/0/36
- D . show authentication sessions method
An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks.
Which two requirement complete this policy? (Choose two)
- A . minimum password length
- B . active username limit
- C . access code control
- D . gpassword expiration period
- E . username expiration date
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos.
Which database should be used to accomplish this goal?
- A . RSA Token Server
- B . Active Directory
- C . Local Database
- D . LDAP
A company is attempting to improve their BYOD policies and restrict access based on certain criteria. The company’s subnets are organized by building.
Which attribute should be used in order to gain access based on location?
- A . static group assignment
- B . IP address
- C . device registration status
- D . MAC address
An engineer needs to configure Cisco ISE Profiling Services to authorize network access for IP speakers that require access to the intercom system. This traffic needs to be identified if the ToS bit is set to 5 and the destination IP address is the intercom system.
What must be configured to accomplish this goal?
- A . NMAP
- B . NETFLOW
- C . pxGrid
- D . RADIUS
An administrator is attempting to join a new node to the primary Cisco ISE node, but receives the error message "Node is Unreachable".
What is causing this error?
- A . The second node is a PAN node.
- B . No administrative certificate is available for the second node.
- C . The second node is in standalone mode.
- D . No admin privileges are available on the second node.
Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node?
- A . radius-server timeout
- B . session-timeout
- C . idle-timeout
- D . termination-action
When setting up profiling in an environment using Cisco ISE for network access control, an organization must use non-proprietary protocols for collecting the information at layer 2.
Which two probes will provide this information without forwarding SPAN packets to Cisco ISE? {Choose two.)
- A . DHCP SPAN probe
- B . SNMP query probe
- C . NetFlow probe
- D . RADIUS probe
- E . DNS probe
A network administrator is configuring a secondary cisco ISE node from the backup configuration of the primary cisco ISE node to create a high availability pair The Cisco ISE CA certificates and keys must be manually backed up from the primary Cisco ISE and copied into the secondary Cisco ISE.
Which command most be issued for this to work?
- A . copy certificate Ise
- B . application configure Ise
- C . certificate configure Ise
- D . Import certificate Ise
A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices.
Where in the Layer 2 frame should this be verified?
- A . CMD filed
- B . 802.1Q filed
- C . Payload
- D . 802.1 AE header