300-715 Practice Test

300-715 Practice Test practice questions, page 9 of 17, with answer review and explanations.

Question 41

An administrator needs to connect ISE to Active Directory as an external authentication source and allow the proper ports through the firewall. Which two ports should be opened to accomplish this task? (Choose two.)

  1. TELNET: 23
  2. HTTPS: 443
  3. HTTP: 80
  4. LDAP: 389
  5. MSRPC:445

Question 42

An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication. Which command should be used to complete this configuration?

  1. aaa authentication dot1x default group radius
  2. dot1x system-auth-control
  3. authentication port-control auto
  4. dot1x pae authenticator

Question 43

An organization wants to implement 802.1X and is debating whether to use PEAP-MSCHAPv2 or PEAP-EAP-TLS for authentication. Drag the characteristics on the left to the corresponding protocol on the right. Select and Place:

Question 44

Drag the descriptions on the left onto the components of 802.1X on the right. Select and Place:

Question 45

A network engineer is configuring Cisco TrustSec and needs to ensure that the Security Group Tag is being transmitted between two devices. Where in the Layer 2 frame should this be verified?

  1. payload
  2. 802.1 AE header
  3. CMD field
  4. 802.1Q field