300-715 Practice Test

300-715 Practice Test practice questions, page 3 of 17, with answer review and explanations.

Question 11

A network engineer is configuring a network device that needs to filter traffic based on security group tags using a security policy on a routed interface. Which command should be used to accomplish this task?

  1. cts role-based policy priority-static
  2. cts cache enable
  3. cts authorization list
  4. cts role-based enforcement

Question 12

In a Cisco ISE split deployment model, which load is split between the nodes?

  1. log collection
  2. device admission
  3. AAA
  4. network admission

Question 13

What is the deployment mode when two Cisco ISE nodes are configured in an environment?

  1. standalone
  2. distributed
  3. standard
  4. active

Question 14

An engineer is testing Cisco ISE policies in a lab environment with no support for a deployment server. In order to push supplicant profiles to the workstations for testing, firewall ports will need to be opened. From which Cisco ISE persona should this traffic be originating?

  1. administration
  2. authentication
  3. policy service
  4. monitoring

Question 15

What does a fully distributed Cisco ISE deployment include?

  1. PAN and MnT on the same node while PSNs are on their own dedicated nodes.
  2. All Cisco ISE personas are sharing the same node.
  3. All Cisco ISE personas on their own dedicated nodes.
  4. PAN and PSN on the same node while MnTs are on their own dedicated nodes.