300-715 Practice Test

300-715 Practice Test practice questions, page 6 of 17, with answer review and explanations.

Question 26

When configuring Active Directory groups, what does the Cisco ISE use to resolve ambiguous group names?

  1. MIB
  2. SID
  3. MAB
  4. TGT

Question 27

Which permission is common to the Active Directory Join and Leave operations?

  1. Remove the Cisco ISE machine account from the domain.
  2. Search Active Directory to see if a Cisco ISE machine account already exists.
  3. Set attributes on the Cisco ISE machine account.
  4. Create a Cisco ISE machine account in the domain if the machine account does not already exist.

Question 28

Which interface-level command is needed to turn on 802.1X authentication?

  1. dot1x system-auth-control
  2. dot1x pae authenticator
  3. aaa server radius dynamic-author
  4. authentication host-mode single-host

Question 29

Which RADIUS attribute is used to dynamically assign the Inactivity active timer for MAB users from the Cisco ISE node?

  1. session-timeout
  2. termination-action
  3. radius-server timeout
  4. idle-timeout

Question 30

What does the dot1x system-auth-control command do?

  1. globally enables 802.1x
  2. causes a network access switch not to track 802.1x sessions
  3. enables 802.1x on a network access device interface
  4. causes a network access switch to track 802.1x sessions