300-715 Practice Test

300-715 Practice Test practice questions, page 8 of 17, with answer review and explanations.

Question 36

Which two values are compared by the binary comparison function in authentication that is based on Active Directory?

  1. user-presented certificate and a certificate stored in Active Directory
  2. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory
  3. user-presented password hash and a hash stored in Active Directory
  4. subject alternative name and the common name

Question 37

What happens when an internal user is configured with an external identity store for authentication, but an engineer uses the Cisco ISE admin portal to select an internal identity store as the identity source?

  1. Authentication is redirected to the internal identity source.
  2. Authentication is granted.
  3. Authentication fails.
  4. Authentication is redirected to the external identity source.

Question 38

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two.)

  1. The Cisco ISE server queries the internal identity store.
  2. The device queries the external identity store.
  3. The device queries the Cisco ISE authorization server.
  4. The device queries the internal identity store.
  5. The Cisco ISE server queries the external identity store.

Question 39

An engineer is configuring a guest password policy and needs to ensure that the password complexity requirements are set to mitigate brute force attacks. Which two requirements should be included in this policy? (Choose two.)

  1. active username limit
  2. password expiration period
  3. access code control
  4. username expiration date
  5. minimum password length

Question 40

An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication. Which access will be denied in this deployment?

  1. DNS
  2. DHCP
  3. EAP
  4. HTTP