300-715 Cisco Exam Questions and Free Practice Test

Question 13

What are two benefits of TACACS+ versus RADIUS for device administration? (Choose two.)

A. TACACS+ has command authorization, and RADIUS does not.

B. TACACS+ uses UDP, and RADIUS uses TCP.

C. TACACS+ supports 802.1X, and RADIUS supports MAB.

D. TACACS+ provides the service type, and RADIUS does not.

E. TACACS+ encrypts the whole payload, and RADIUS encrypts only the password.

Correct Answer:AE

Question 14

Which interface-level command is needed to turn on 802.1X authentication?

A. dot1x system-auth-control

B. dot1x pae authenticator

C. aaa server radius dynamic-author

D. authentication host-mode single- host

Correct Answer:B
Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst4500/12-2/31sg/configuration/guide/conf/dot1x.html

Question 15

What service can be enabled on the Cisco ISE node to identify the types of devices connecting to a network?

A. profiling

B. central web authentication

C. MAB

D. posture

Correct Answer:A
Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-1/admin_guide/b_ise_admin_guide_21/b_ise_admin_guide_20_chapter_010100.html

Question 16

Which advanced option within a WLAN must be enabled to trigger Central Web Authentication for Wireless users on AireOS controller?

A. DHCP server

B. override Interface ACL

C. static IP tunneling

D. AAA override

Correct Answer:D
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

Question 17

Which statement about configuring certificates for BYOD is true?

A. The SAN field is populated with the end user name.

B. The CN field is populated with the endpoint host name.

C. An endpoint certificate is mandatory for the Cisco ISE BYOD.

D. An Android endpoint uses EST, whereas other operating systems use SCEP for enrollment.

Correct Answer:C

START 300-715 EXAM