Cisco Implementing and Configuring Cisco Identity Services Engine - 300-715 Exam Practice Test

What does the dot1x system-auth-control command do?

An administrator must configure Cisco ISE to authenticate a user accessing a Cisco Adaptive Security Appliance firewall through SSH. The solution must meet these requirements:
* The local Cisco ISE database must be used for user authentication.
* ASA commands run by users must be validated.
These configurations were performed:
* Added the Cisco Adaptive Security Appliance firewall
* Configured user accounts
* Enabled the Device Admin service in Cisco ISE
* Configured a TACACS+ profile
* Configured an authorization policy
* Configured the ASA firewall for authentication and authorization
Which two actions must be taken in Cisco ISE? (Choose two.)

What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

What is an advantage of using EAP-TLS over EAP-MS-CHAPv2 for client authentication?

A Cisco ISE engineer is creating a certificate authentication profile to be used with machine authentication for the network. The engineer wants to be able to compare the user-presented certificate with a certificate stored in Active Directory. What must be done to accomplish this?

A network engineer is configuring guest access and notices that when a guest user registers a second device for access, the first device loses access What must be done to ensure that both devices for a particular user are able to access the guest network simultaneously?

Which two default endpoint identity groups does Cisco ISE create? (Choose two )

An engineer is configuring Central Web Authentication in Cisco ISE to provide guest access. When an authentication rule is configured in the Default Policy Set for the Wired_MAB or Wireless_MAB conditions, what must be selected for the " if user not found " setting?

What sends the redirect ACL that is configured in the authorization profile back to the Cisco WLC?

Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

An engineer must configure guest access on Cisco ISE for company visitors. Which step must be taken on the Cisco ISE PSNs before a guest portal is configured?

Which Cisco ISE deployment model provides redundancy by having every node in the deployment configured with the Administration. Policy Service, and Monitoring personas to protect from a complete node failure?

An administrator is attempting to replace the built-in self-signed certificates on a Cisco ISE appliance. The CA is requesting some information about the appliance in order to sign the new certificate. What must be done in order to provide the CA this information?