Loading demo links...
Showing 1–15 of 15 questions
Drag and drop the description from the left onto the protocol on the right that is used to carry out system authentication, authentication, and accounting.
Answer is in the explanation below.
Which two roles are taken on by the administration person within a Cisco ISE distributed environment? (Choose two.)
Select all that apply, then click Submit answer.
backup
secondary
standby
primary
active
Which two task types are included in the Cisco ISE common tasks support for TACACS+ profiles? (Choose two.)
Select all that apply, then click Submit answer.
ASA
Firepower
Shell
WLC
IOS
Which two features should be used on Cisco ISE to enable the TACACS+ feature? (Choose two )
Select all that apply, then click Submit answer.
External TACACS Servers
Device Admin Service
Device Administration License
Server Sequence
Command Sets
What are two differences between the RADIUS and TACACS+ protocols'? (Choose two.)
Select all that apply, then click Submit answer.
RADIUS is a Cisco proprietary protocol, whereas TACACS+ is an open standard protocol
TACACS+uses TCP port 49. whereas RADIUS uses UDP ports 1812 and 1813.
RADIUS offers multiprotocol support, whereas TACACS+ does not
RADIUS combines authentication and authorization, whereas TACACS+ does not
RADIUS enables encryption of all the packets, whereas with TACACS+. only the password is encrypted.
An administrator has added a new Cisco ISE PSN to their distributed deployment. Which two features must the administrator enable to accept authentication requests and profile the endpoints correctly, and add them to their respective endpoint identity groups? (Choose two )
Select all that apply, then click Submit answer.
Session Services
Endpoint Attribute Filter
Posture Services
Profiling Services
Radius Service
Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two)
Select all that apply, then click Submit answer.
The device queries the internal identity store
The Cisco ISE server queries the internal identity store
The device queries the external identity store
The Cisco ISE server queries the external identity store.
The device queries the Cisco ISE authorization server
Users in an organization report issues about having to remember multiple usernames and passwords. The network administrator wants the existing Cisco ISE deployment to utilize an external identity source to alleviate this issue.
Which two requirements must be met to implement this change? (Choose two.)
Select all that apply, then click Submit answer.
Establish access to one Global Catalog server
Ensure that the NAT address is properly configured
Provide domain administrator access to Active Directory
Configure a secure LDAP connection
Enable IPC access over port 80
What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?
Select an option, then click Submit answer.
Authentication is redirected to the internal identity source.
Authentication is granted.
Authentication fails.
Authentication is redirected to the external identity source.
An organization is adding nodes to their Cisco ISE deployment and has two nodes designated as primary and secondary PAN and MnT nodes. The organization also has four PSNs An administrator is adding two more PSNs to this deployment but is having problems adding one of them What is the problem?
Select an option, then click Submit answer.
The new nodes must be set to primary prior to being added to the deployment
The current PAN is only able to track a max of four nodes
Only five PSNs are allowed to be in the Cisco ISE cube if configured this way.
One of the new nodes must be designated as a pxGrid node
A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices.
Where in the Layer 2 frame should this be verified?
Select an option, then click Submit answer.
payload
802.1 AE header
CMD field
802.1Q field
A network administrator notices that after a company-wide shut down, many users cannot connect their laptops to the corporate SSID. What must be done to permit access in a timely manner?
Select an option, then click Submit answer.
Authenticate the user's system to the secondary Cisco ISE node and move this user to the primary with the renewed certificate.
Connect this system as a guest user and then redirect the web auth protocol to log in to the network.
Add a certificate issue from the CA server, revoke the expired certificate, and add the new certificate in system.
Allow authentication for expired certificates within the EAP-TLS section under the allowed protocols.
A Cisco ISE administrator must restrict specific endpoints from accessing the network while in closed mode. The requirement is to have Cisco ISE centrally store the endpoints to restrict access from. What must be done to accomplish this task''
Select an option, then click Submit answer.
Add each MAC address manually to a blocklist identity group and create a policy denying access
Create a logical profile for each device's profile policy and block that via authorization policies.
Create a profiling policy for each endpoint with the cdpCacheDeviceld attribute.
Add each IP address to a policy denying access.
A Cisco ISE server sends a CoA to a NAD after a user logs in successfully using CWA.
Which action does the CoA perform?
Select an option, then click Submit answer.
It terminates the client session.
It applies the downloadable ACL provided in the CoA.
It triggers the NAD to reauthenticate the client.
It applies new permissions provided in the CoA to the client session.
An engineer is enabling a newly configured wireless SSID for tablets and needs visibility into which other types of devices are connecting to it. What must be done on the Cisco WLC to provide this information to Cisco ISE9
Select an option, then click Submit answer.
enable IP Device Tracking
enable MAC filtering
enable Fast Transition
enable mDNS snooping
Thinking of taking the Implementing and Configuring Cisco Identity Services Engine (SISE) v4.0 (300-715 SISE) (300-715) exam? This free Cisco practice test is the place to start. The 15 questions come free from the full 320-question Study4Pass practice set — a quick, honest check of where you stand. The free sample includes 7 single-answer, 7 multiple-answer and 1 drag-and-drop questions — the same mix of formats you will meet in the full set. The set follows the real exam’s spread of topics: Implementing Cisco Edge Network Security Solutions (SENSS), Implementing Cisco Secure Access Solutions (SISAS) and Implementing Cisco Secure Mobility Solutions (SIMOS). The Cisco 300-715 Implementing and Configuring Cisco Identity Services Engine (SISE) exam is a 90-minute exam associated with the Cisco Certified Network Professional (CCNP) Security certification.
The target audience for the Cisco 300-715 exam is IT professionals who want to get certified in the Implementing and Operating Cisco Security Core Technologies certification track. The prerequisite for the Cisco 300-715 exam is to have a valid Cisco Certified Network Associate (CCNA) certification.
Work through the questions one at a time and read every explanation, even for the ones you get right — the reasoning behind an answer is what the real exam tests. If one area keeps costing you marks, you have found exactly what to revise before exam day.
Think of the result as a map, not a verdict. The questions you miss point straight at the topics that need work, and the explanations tell you why the correct option wins. Candidates who loop through that cycle — practise, review the reasoning, re-test — walk into the real exam having already seen their weak spots and fixed them.
Inside the full 300-715 practice set:
There is no clock and no account needed. Answer each question, check the result, and read the explanation before moving on. For anything that still feels unclear, Ask AI is built into this AI-Enabled practice test — it explains the concept behind the question so the next one like it gets easier. When the free sample feels comfortable, the full set of 320 questions adds timed Exam Simulation, topic-by-topic training, and flagged-question review — the closest thing to exam day you can get before the real thing.
Yes. Every question on this page — all 15 of them — is free to use, and you never need to create an account to try them.
The full Study4Pass set for 300-715 has 320 practice questions. This page gives you 15 of them free so you can judge the quality and difficulty first.
Yes. Check any question to reveal the correct answer and its explanation, and use Ask AI whenever you want the underlying concept explained step by step.
No — these are practice questions built to match the 300-715 domains and difficulty level, so you can prepare for the real exam with confidence.
