Cisco certshero free 300-715 Updates by Huzaifa q124 vce pdf

Page: 3 / 22

Exam Name:	Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 (300-715 SISE)
Exam Code:	300-715 Dumps
Vendor:	Cisco	Certification:	CCNP Security
Questions:	299 Q&A's	Shared By:	huzaifa

Question 12

An engineer is starting to implement a wired 802.1X project throughout the campus. The task is for failed authentication to be logged to Cisco ISE and also have a minimal impact on the users. Which command must the engineer configure?

Options:

authentication open

pae dot1x enabled

authentication host-mode multi-auth

monitor-mode enabled

Discussion

Answer:

Explanation:

In the context of a wired 802.1X deployment with Cisco ISE, the requirement is to log failed authentications while minimizing user impact. Let's analyze each option:

A. authentication open - This command configures the port to allow network access regardless of the authentication state. It's useful in situations where specific devices can't perform 802.1X authentication but should still be allowed network access. However, it doesn't specifically address the logging of failed authentications.

B. pae dot1x enabled - PAE (Port Access Entity) refers to the entity on a network device that enforces access control. This command enables 802.1X on the port, which is a prerequisite for implementing 802.1X, but doesn't directly relate to logging failed authentication attempts.

C. authentication host-mode multi-auth - This command configures the port to allow multiple authenticated sessions. This mode is used when multiple devices are connected to the same port (like in a conference room). While it's relevant for 802.1X environments, it doesn't specifically cater to logging failed authentications or minimizing user impact.

D. monitor-mode enabled - This command is used in the context of 802.1X to enable Monitor Mode on a port. Monitor Mode allows a port to grant limited network access to endpoints without 802.1X capabilities. It's often used to ease the deployment of 802.1X by monitoring the authentication status without fully enforcing access control, thereby minimizing user impact. It also helps in logging authentication attempts, including failures.

Given these options, the most appropriate command for logging failed authentications while having minimal impact on users would be D. monitor-mode enabled. This command ensures that authentication attempts are monitored and logged, including failures, without fully restricting access, thus minimizing the impact on users who might face issues with the authentication process.

Question 13

An engineer has been tasked with standing up a new guest portal for customers that are waiting in the lobby. There is a requirement to allow guests to use their social media logins to access the guest network to appeal to more customers What must be done to accomplish this task?

Options:

Create a sponsor portal to allow guests to create accounts using their social media logins.

Create a sponsored guest portal and enable social media in the external identity sources.

Create a self-registered guest portal and enable the feature for social media logins

Create a hotspot portal and enable social media login for network access

Discussion

Question 14

An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

Options:

policy service

monitoring

pxGrid

primary policy administrator

Discussion

Question 15

Which nodes are supported in a distributed Cisco ISE deployment?

Options:

Policy Service nodes for session failover

Monitoring nodes for PxGrid services

Administration nodes for session failover