Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
An engineer is configuring a virtual Cisco ISE deployment and needs each persona to be on a different node.
Which persona should be configured with the largest amount of storage in this environment?
- A . policy Services
- B . Primary Administration
- C . Monitoring and Troubleshooting
- D . Platform Exchange Grid
An engineer is configuring Cisco ISE policies to support MAB for devices that do not have 802.1X capabilities. The engineer is configuring new endpoint identity groups as conditions to be used in the AuthZ policies, but noticed that the endpoints are not hitting the correct policies.
What must be done in order to get the devices into the right policies?
- A . Manually add the MAC addresses of the devices to endpoint ID groups in the context visibility database.
- B . Create an AuthZ policy to identify Unknown devices and provide partial network access prior to profiling.
- C . Add an identity policy to dynamically add the IP address of the devices to their endpoint identity groups.
- D . Identify the non 802.1X supported device types and create custom profiles for them to profile into.
During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?
- A . Cisco App Store
- B . Microsoft App Store
- C . Cisco ISE directly
- D . Native OTA functionality
DRAG DROP
An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints.
Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)
- A . Firepower
- B . WLC
- C . IOS
- D . ASA
- E . Shell
What does a fully distributed Cisco ISE deployment include?
- A . PAN and PSN on the same node while MnTs are on their own dedicated nodes.
- B . PAN and MnT on the same node while PSNs are on their own dedicated nodes.
- C . All Cisco ISE personas on their own dedicated nodes.
- D . All Cisco ISE personas are sharing the same node.
An engineer deploys Cisco ISE and must configure Active Directory to then use information from Active Directory in an authorization policy.
Which two components must be configured, in addition to Active Directory groups, to achieve this goat? (Choose two)
- A . Active Directory External Identity Sources
- B . Library Condition for External Identity. External Groups
- C . Identity Source Sequences
- D . LDAP External Identity Sources
- E . Library Condition for Identity Group: User Identity Group
Which statement about configuring certificates for BYOD is true?
- A . An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment
- B . The SAN field is populated with the end user name.
- C . An endpoint certificate is mandatory for the Cisco ISE BYOD
- D . The CN field is populated with the endpoint host name
A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components.
Which two protocols should complete this task?
- A . PEAP
- B . EAP-MD5
- C . LEAP
- D . EAP-TLS
- E . EAP-TTLS
Refer to the exhibit.
A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server.
Which two commands should be run to complete the configuration? (Choose two)
- A . aaa authorization auth-proxy default group radius
- B . radius server vsa sand authentication
- C . radius-server attribute 8 include-in-access-req
- D . ip device tracking
- E . dot1x system-auth-control