Exam Name: | Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 (300-715 SISE) | ||
Exam Code: | 300-715 Dumps | ||
Vendor: | Cisco | Certification: | CCNP Security |
Questions: | 295 Q&A's | Shared By: | creed |
What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?
An administrator plans to use Cisco ISE to deploy posture policies to assess Microsoft Windows endpoints that run Cisco Secure Client. The administrator wants to minimize the occurrence of messages related to unknown posture profiles if Cisco ISE fails to determine the posture of the endpoint. Secure Client is deployed to all the endpoints. and all the required Cisco ISE authentication, authorization, and posture policy configurations were performed. Which action must be taken next to complete the configuration?
A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed into this task?
An engineer must use Cisco ISE to provide network access to endpoints that cannot support 802.1X. The endpoint MAC addresses must be allowlisted by configuring an endpoint identity group. These configurations were performed:
Configured an identity group named allowlist
Configured the endpoints to use the MAC address of incompatible 802.1X devices
Added the endpoints to the allowlist identity group
Configured an authentication policy for MAB users
What must be configured?