Cisco 300-715 Practice Exams
Last updated on Oct 22,2026- Exam Code: 300-715
- Exam Name: Implementing and Configuring Cisco Identity Services Engine (SISE)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication.
Which access will be denied in this?
- A . HTTP
- B . DNS
- C . EAP
- D . DHCP
If a user reports a device lost or stolen, which portal should be used to prevent the device from accessing the network while still providing information about why the device is blocked?
- A . Client Provisioning
- B . Guest
- C . BYOD
- D . Blacklist
A company manager is hosting a conference. Conference participants must connect to an open guest SSID and only use a preassigned code that they enter into the guest portal prior to gaining access to the network.
How should the manager configure Cisco ISE to accomplish this goal?
- A . Create entries in the guest identity group for all participants.
- B . Create an access code to be entered in the AUP page.
- C . Create logins for each participant to give them sponsored access.
- D . Create a registration code to be entered on the portal splash page.
What protocol does Cisco ISE use primarily to communicate authentication and authorization policies to network devices?
- A . SNMP
- B . HTTPS
- C . RADIUS
- D . SSH
A network administrator is currently using Cisco ISE to authenticate devices and users via 802 1X There is now a need to also authorize devices and users using EAP-TLS.
Which two additional components must be configured in Cisco ISE to accomplish this’? (Choose two.)
- A . Network Device Group
- B . Serial Number attribute that maps to a CA Server
- C . Common Name attribute that maps to an identity store
- D . Certificate Authentication Profile
- E . EAP Authorization Profile
An engineer is configuring ISE for network device administration and has devices that support both protocols.
What are two benefits of choosing TACACS+ over RADUs for these devices? (Choose two.)
- A . TACACS+ is FIPS compliant while RADIUS is not
- B . TACACS+ is designed for network access control while RADIUS is designed for role-based access.
- C . TACACS+ uses secure EAP-TLS while RADIUS does not.
- D . TACACS+ provides the ability to authorize specific commands while RADIUS does not
- E . TACACS+ encrypts the entire payload being sent while RADIUS only encrypts the password.
Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?
- A . TCP 8909
- B . TCP 8905
- C . UDP 1812
- D . TCP 443
An engineer is tasked with placing a guest access anchor controller in the DMZ.
Which two ports or port sets must be opened up on the firewall to accomplish this task? (Choose two.)
- A . UDP port 1812 RADIUS
- B . TCP port 161
- C . TCP port 514
- D . UDP port 79
- E . UDP port 16666
Refer to the exhibit
In which scenario does this switch configuration apply?
- A . when allowing a hub with multiple clients connected
- B . when passing IP phone authentication
- C . when allowing multiple IP phones to be connected
- D . when preventing users with hypervisor
What is a requirement for Feed Service to work?
- A . TCP port 3080 must be opened between Cisco ISE and the feed server
- B . Cisco ISE has a base license.
- C . Cisco ISE has access to an internal server to download feed update
- D . Cisco ISE has Internet access to download feed update