Share your SISE Experience

anyone have valid dump 300-715 ?

can anyone share latest dumps with me waqasowiki at gmail dot com? i have chines dumps but i am not sure is it valid till now because date mentioned there 19-Apr-2020.

Anyone has the latest dumps ? please share.

Hello anonymous,
Please Can you send me the dump ? Here is my email
anes.allal @ gmail . com
Thanks

Anyone Can share a valid dump please ?

Hi AnonymousNovember 15th, 2020,

can you expand a little bit more on the SNMP D&D? What was the question ipconfig/all about?

I followed the the ciscopress ISE training course and now going thoroughly through the questions from ccnpexam18 + the first 7 chapters in an old SISAS 300-208 official Cert Guide. New book is not available yet in paper..

Has anyone got other suggestions, where to study or other subset of questions other then ccnpexam18? Have the exam in 2 weeks.

Thank you all for contributing!

Please who can share the dump with us ?

PLEASE HAVE THE RECENT DUMP OF THE 300-715 Exam .

Please share valid dumps with me
paynesarah768 @ gmail . com Thank you for your kindness

Please share valid dumps with us
anes.allal13 @ gmail . com
Thank you for your help

please do you have the recent 300-715 exam dumps

Hi all,

today I’ve passed the exam with 875 points(passing score 825, 60 questions). It was quite a struggle but I got the job done eventually.

Do not relay on questions from CCNPexam18 only, or you will fail.

https://certcollection.org/forums/topic/330435-300-715-sise-dumps/page/6/?tab=comments#comment-1344171

Only around 40% and maybe even less of the exam content comes out of the above, but it is a solid foundation for your exam preparation, you should review those no doubt.
There was a quite a lot of questions around CLI commands, you would use for NAD configuration, so you should definitely have some hands on or LAB experience.

My study sources were:

1. CiscoPress videos – CCNP Security Cisco Identity Services Engine SISE 300-715 Complete Video Course (Video Training)
2. CCNP Security SISAS 300-208 – old cert.guide – first 7 chapters.
3. CCNPexam18 – questions
4. INE videos are quite decent
5. Youtube videos from Katherine McNamara are also quite decent source.

Wish you all the best of luck!

I passed my exam today. So many questions, around 20, are new today apart from the Chinese dump, vce files and other questions shared here. After my exam, I did some googling about the new questions and found this link. ‘drive(dot)google(dot)com(slash)drive(slash)folders(slash)1-jcJT1SxbH3DDB-cgSq_cPEhlxMEfvFK’ . I wish I had known these questions before exam, still no problem, anyway I passed. :)

Do research on Cisco documentation for answers, as some of the questions have incorrect answers.. Good luck for the exam

Hi Random

The files from this drive link are updated? Most of the question are from this files?

Can someone email me the dump(s) or VCE file? I am at pisgone at gmail dot com

Thanks in advance!

Hi All,

Please download updated dumps for SISE 300-715 from below link,

https://certcollection.org/forums/topic/333906-ccnp-security-300-715-sise-dumps/

i have passed my exam this week. i have updated new questions in the file as well.

In a Cisco ISE split deployment model, which load is split between the nodes?
A. AAA
B. network admission
C. log collection
D. device admission

what happen when an internal user is configured with an external identity store for authentication but an engineer uses the cisco ise admin portal to select an internal identity store as the identity source?
A. Authentication is granted
B. Authentication failed
C. Authentication is redirected to an external identity store
D. Authentication is redirected to an external identity store

An engineer is working with a distributed deployment of cisco ise and needs to configure various network probes to collect a set of attributes from the endpoints on the network. which node should be used to accomplish this task?
A. Policy service
B. Monitoring
C. Primary policy administrator
D. PxGrid

A network engineer needs to ensure that the access credentials are not exposed during the 802.1x authentication among components. Which two protocols should complete this task? (Choose two.)
A. PEAP
B. EAP-MD5
C. LEAP
D. EAP-TLS
E. EAP-TTLS

A network engineer is implementing cisco ISE and needs to configure 802.1x. the ports settings are configured for port-based authentication. which command should be used to complete this configuration?
A. aaa authentication dot1x default group radius
B. dot1x system-auth-control
C. authentication port-control auto
D. dot1x pae authenticator

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server. Which two commands should be run to complete the configuration? (Choose two)
A. AAA authorization auth-proxy default group radius
B. radius server vsa sand authentication
C. radius-server attribute 8 include-in-access-req
D. IP device tracking
E. dot1x system-auth-control

Someone knows the corrects answers?

.In a Cisco ISE split deployment model, which load is split between the nodes?

A. AAA
B. network admission
C. log collection
D. device admission

Answer: A
Explanation:
However, the AAA load is split between the two Cisco ISE nodes to optimize the AAA workflow
https://www.cisco.com/c/en/us/td/docs/security/ise/2-6/install_guide/b_ise_InstallationGuide26.pdf

A network engineers configuring the switch to accept downloadable ACLs from a Cisco ISC server. Which two commands should be run to complete the configuration? (Choose two)
A. AAA authorization auth-proxy default group radius
B. radius server vsa sand authentication
C. radius-server attribute 8 include-in-access-req
D. IP device tracking
E. dot1x system-auth-contro
ntroduction
This document describes how the IP device tracking feature works, which includes what the triggers are to add and remove a host. Also, the impact of device tracking on the 802.1x Downloadable Access Control List (DACL) is explained. The behavior changes between versions and platforms.

https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/119374-technote-dacl-00.html

Hey there! Anyone got the new SISE cert guide? Or a link to download it?

Pass with 89X. Questions remain the same as above.

Hi Superccnp,

I do not fully understand what you mean.

Hi All,

Today I passed with 898 points. First of all thank you ccnaexam18. For the questions show the correctness of the answers. But I fixed the answers on some questions. Apart from these issues, there are 10 more questions in the attached CCNP_300_715_SISEI_chinese_15_12_2020.rar. CCNP_300_715_SISEI_chinese_15_12_2020.rar dump just look at the questions I mentioned below. Because the others are in 92 problems. 81,83,84,85,87,91,92,95,98,99 ,100

https://certcollection.org/forums/topic/330435-300-715-sise-dumps/page/10/#comments

Guys, i have just passed the exam only this questione was reversed from this

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

A. UDP/TCP 389

B. UDP123

C. TCP 21  correct

D. TCP 445

E. TCP 88

to this

what ports should be opened so you will choose 389 and 445

go for the exam the dump is valid

i will take exam next friday any recommendations ?

@Mohamed no recommendations the dump is valid only one new question mentioned above

If there is a firewall between Cisco ISE and an Active Directory external identity store, which port does not need to be open?

A. UDP/TCP 389

B. UDP123

C. TCP 21 correct

D. TCP 445

E. TCP 88

to this

what ports should be opened so you will choose 389 and 445

@Sherif could you help me and share dumb with me
{email not allowed}

A lot of new questions about BYOD and Device admin, be careful with the dumps

hi Anonymous
do you take exam today?

Hi Parrain5500.

Last friday (01/08), this dumps covered something like 2/3 of the test, maybe less, it helps but its not a guaranteed pass.

about byod, do you talk about those questions or there are new BYOD questions

What should be considered when configuring certificates for BYOD?
A. An endpoint certificate is mandatory for the Cisco ISE BYOD
B. An Android endpoint uses EST whereas other operation systems use SCEP for enrollment
C. The CN field is populated with the endpoint host name.
D. The SAN field is populated with the end user name

Which two components are required for creating a Native Supplicant Profile within a BYOD
flow? (Choose two)
A. Windows Settings
B. Connection Type
C. iOS Settings
D. Redirect ACL
E. Operating System

During BYOD flow, from where does a Microsoft Windows PC download the Network Setup
Assistant?
A. Cisco App Store
B. Microsoft App Store
C. Cisco ISE directly
D. Native OTA functionality

What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
A. Network Access Control
B. My Devices Portal
C. Application Visibility and Control
D. Supplicant Provisioning Wizard

Which protocol must be allowed for a BYOD device to access the BYOD portal?
A. HTTP
B. SMTP
C. HTTPS
D. SSH

Guys quick question, does anybody knows how many items/questions are on the exam?

@anonymous you re right
i just took exam. lot of new questions guys. around 20 new questions. if you rely for 80q dump, you will probably fail. not valid
new drag and drop EAP TLS vs MSCHAP V2
questions about anchor WLC. which port must open when it behind a firewall.
questions about device admin (shell profile configuration)
i dont remember other questions. be careful.
good luck guys

@parrain5500 How many questions in total you had on your exam?

@knox
61 questions

@parrain5500 Thanks!

Hi parrain.

Yes, this was the new questions I was talking about. As you could see the dumps still a good source of questions, you can get about 30-40 questions on your test from the dump, but it is not a pass anymore. There were some tricky new questions but in my opinion the majority was easy.

@anonymous which dump are you talking about…is it the one that @Levent provided from certcollection which has a107 q&A or the dump from digitut premium?

Does the dump from this link provided sufficient to pass?
https://certcollection.org/forums/topic/330435-300-715-sise-dumps/page/10/#comments

@anonymous & @parrain5500 Please advise as i am going to take exam net week…

@knox
i checked the dump from certcollection. the 20 new questions are not among them.

@parrain5500 Thank you! well need to source out those 20 new questions in order to pass!

I confirm. arround 20 new question. The certcollection 102 question dont have the new? Anyway not dificult question. 1 new drag n drop.

Guys anyone passed recently and can someone identify as per above information the new 20 qeustions, thank you!

passed exam now
the dumb not valid there is 20 question new about BYOD and WLC

@mohamed can you please share valid dump you used to pass the exam

Hello;

@Anonymous , Could share the valid dump and your experience about the exam

@anonymous pls share the valid dump ;)

Passed yesterday. A lot of new questions, dumps cover only about 50%.

looks like certcollection is down…

Certcollection is still down, someone has the last chineese or certcollections dumps ?

Hi guys,
I just passed yesterday, 875/1000. Many new questions. The following are what i remember:
1 new drag & drop Q: EAP-TLS (more secure, X509 format, auto enrollment) vs MSCHAPv2
1 new config shell profile Q: User login are authorized user EXEC mode and max privilege (Default privilege:1, max privilege:15 )
…

Homer who? Can guarantee he has the new questions too?

does anyone have the new Q please share with us

What is the custom condition that a cisco ISE authorisation policy cant match?
A.Company Contact
B.Custom
C.time
D. Device type
e.Posture

Anybody know the right answer?

Is there any lab stimulation on 300-715 exam?

This week update of pdf and vce? From where?

Hi Everyone,

Please share exam format, Like how may number of MCQ questions, Drag n drop ?
Also is there any Simlet or LAB for this exam ?

@Anonymous

Please Can you send me the dump ?

Does anybody have CCNP Security Identity Management SISE 300-715 Official Cert Guide?

Can anyone provide any similar sites such as certcollection and securitytut?

@anonymous could u share the dump

Can anyone share the dump?

pisgone at gmail dot com

Hello, Somebody can help me with the response correct to the following question?

QUESTION 8
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

– [ ] A. show authentication sessions output
– [ ] D. show authentication sessions interface Gi1/0/x output
– [ ] B. Show authentication sessions
– [x] C. show authentication sessions interface Gi 1/0/x

What is the response to the C or B?

QUESTION 9
What gives Cisco ISE an option to scan endpoints for vulnerabilities?

– [ ] A. authorization policy
– [ ] B. authentication policy
– [ ] C. authentication profile
– [x] D. authorization profile

What is the response to the A or D?

QUESTION 11
Which interface-level command is needed to turn on 802 1X authentication?

– [ ] D. aaa server radius dynamic-author
– [ ] B. dot1x system-auth-control
– [ ] C. authentication host-mode single-host
– [x] A. Dofl1x pae authenticator

What is the response to the B or A?

QUESTION 14
During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

– [ ] A. Cisco App Store
– [ ] B. Microsoft App Store
– [ ] D. Native OTA functionality
– [x] C. Cisco ISE directly

What is the response to the A or C?

QUESTION 24
Client provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)

– [ ] B. TFTP
– [ ] D. local disk
– [x] E. Posture Agent Profile
– [x] C. www-cisco.com
– [x] A. FTP

What is the response to the D or A?

QUESTION 25
How is policy services node redundancy achieved in a deployment?

– [ ] A. by enabling VIP
– [ ] B. by utilizing RADIUS server list on the NAD
– [ ] C. by creating a node group
– [x] D. by deploying both primary and secondary node

What is the response to the D or C?

QUESTION 29
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
– [ ] A. Network Access Control
– [ ] B. My Devices Portal
– [ ] C. Application Visibility and Control
– [x] D. Supplicant Provisioning Wizard

What is the response to the B or D?

QUESTION 31
Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

– [ ] B. TCP 8905
– [ ] C. CUDP 1812
– [ ] D. TCP 443
– [x] A. TCP 8909

What is the response to the B or A?

QUESTION 46
Which two responses from the RADIUS server to NAS are valid during the authentication
process? (Choose two )

– [ ] A. access-response
– [ ] B. access-request
– [ ] C. access-reserved
– [x] E. access-challenge
– [x] D. access-accept

What is the response to the E or B?

QUESTION 76
Which Cisco ISE node does not support automatic failover?

– [ ] A. Inline Posture node
– [ ] D. Admin node
– [ ] C. Policy Services node
– [x] B. Monitoring node

What is the response to the D or B?

QUESTION 82
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the
ability to auto switch port for authentication?

– [ ] A. enable bypass-MAC
– [ ] B. dot1x system-auth-control
– [ ] D. enable network-authentication
– [x] C. mab

What is the response to the B or C?

QUESTION 84
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

– [ ] B. monitoring
– [ ] C. pxGrid
– [ ] D. primary policy administrator
– [x] A. policy service

What is the response to the B or A?

QUESTION 100
An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication.
Which command should be used to complete this configuration?

– [ ] A. aaa authentication dot1x default group radius
– [ ] C. authentication port-control auto
– [ ] D. dot1x pae authenticator
– [x] B. dot1x system-auth-control

What is the response to the B or D?

Answer your questions:

QUESTION 8
Which command displays all 802 1X/MAB sessions that are active on the switch ports of a Cisco Catalyst switch?

– [ ] A. show authentication sessions output
– [ ] D. show authentication sessions interface Gi1/0/x output
– [X] B. Show authentication sessions
– [ ] C. show authentication sessions interface Gi 1/0/x

Note: its asking for authentications globally, no the details on interface.

QUESTION 9
What gives Cisco ISE an option to scan endpoints for vulnerabilities?

– [X] A. authorization policy
– [ ] B. authentication policy
– [ ] C. authentication profile
– [ ] D. authorization profile

Note: under any policy you have created we have 2 options, Authorization Policy – Local/Global Exceptions, any of these options. Can you check on your ISE deployment.

QUESTION 11
Which interface-level command is needed to turn on 802 1X authentication?

– [ ] D. aaa server radius dynamic-author
– [ ] B. dot1x system-auth-control
– [ ] C. authentication host-mode single-host
– [x] A. Dofl1x pae authenticator

Note: here is correctly, because dot1x system-auth-control turns on dot1x globally, can check on any switch supported for 802.1x

QUESTION 14
During BYOD flow, from where does a Microsoft Windows PC download the Network Setup Assistant?

– [ ] A. Cisco App Store
– [ ] B. Microsoft App Store
– [ ] D. Native OTA functionality
– [x] C. Cisco ISE directly

Note: its correctly the option A, its a wizard from ISE, but you can download from cisco.com the most recent version of that wizard.

QUESTION 24
Client provisioning resources can be added into the Cisco ISE Administration node from which three of these? (Choose three.)

– [ ] B. TFTP
– [x] D. local disk
– [x] E. Posture Agent Profile
– [x] C. www-cisco.com
– [] A. FTP
Note: this option is D, ’cause he asking for client provisioning resources, not an repository.

QUESTION 25
How is policy services node redundancy achieved in a deployment?

– [ ] A. by enabling VIP
– [ ] B. by utilizing RADIUS server list on the NAD
– [ ] C. by creating a node group
– [x] D. by deploying both primary and secondary node

Note: im choosing the answer C, because i think its the best practice making a node group of PSNs, maybe the VIP but in this question its not mencioning F5, but im not sure about that, can choose the option D.

QUESTION 29
What allows an endpoint to obtain a digital certificate from Cisco ISE during a BYOD flow?
– [ ] A. Network Access Control
– [ ] B. My Devices Portal
– [ ] C. Application Visibility and Control
– [x] D. Supplicant Provisioning Wizard

Note: D its the correct, this happend in onboarding process.
What is the response to the B or D?

QUESTION 31
Which port does Cisco ISE use for native supplicant provisioning of a Windows laptop?

– [ ] B. TCP 8905
– [ ] C. CUDP 1812
– [ ] D. TCP 443
– [x] A. TCP 8909
Note: hace two answrs here but if i rememmber the port TCP8905 its for posture, i think the correct answer is the A.

QUESTION 46
Which two responses from the RADIUS server to NAS are valid during the authentication
process? (Choose two )

– [ ] A. access-response
– [ ] B. access-request
– [ ] C. access-reserved
– [x] E. access-challenge
– [x] D. access-accept
Note: i think the access-request its on authorization process, so think that 2 options are good.

QUESTION 76
Which Cisco ISE node does not support automatic failover?

– [ ] A. Inline Posture node
– [ ] D. Admin node
– [ ] C. Policy Services node
– [x] B. Monitoring node

QUESTION 82
An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the
ability to auto switch port for authentication?

– [ ] A. enable bypass-MAC
– [ ] B. dot1x system-auth-control
– [ ] D. enable network-authentication
– [x] C. mab

What is the response to the B or C?

QUESTION 84
An engineer is working with a distributed deployment of Cisco ISE and needs to configure various network probes to collect a set of attributes from the used to accomplish this task?

– [ ] B. monitoring
– [ ] C. pxGrid
– [ ] D. primary policy administrator
– [x] A. policy service

QUESTION 100
An engineer is implementing Cisco ISE and needs to configure 802.1X. The port settings are configured for port-based authentication.
Which command should be used to complete this configuration?

– [ ] A. aaa authentication dot1x default group radius
– [ ] C. authentication port-control auto
– [ ] D. dot1x pae authenticator
– [x] B. dot1x system-auth-control

What is the response to the B or D?

thanks @SISE300-715 for you askweing, i will take the exam this friday, i am thinks buy the exam of SPOTOYOYO tomorrow, if somebody need this dump, we can pay this dump half and half.

@Hi Edward, please tell us if spotoyoyo quiestions really appear in the exam

Thanks & good luck in your exam

Hi Edward, good luck maybe i gonna take the exam in two weeks, so if you ca share the dumps was fantastic! anyway Good luck on your tets! please share your experience here!

My mail:
betogzz940408@ at gmail at com

@Edward whats your mail

Hello Guys, I will take this exam tomorrow, and I am feeling positive.

@Edward

Good luck with your exam, please tell us about your experience

Hello I pass my exam, I pass with 908

@Edward congrats! Which dump did you end up using and were there any new questions?

Hello guys, honestly, in the exam there are questions from the dump that I could find here, approximately 40, in the exam I took 61 questions that are not in the dump.

@ Edward

Congratulations for pass the exam. Please tell me if I understood you well, you had 61 questions, 40 of them you found them previously in this site, so 21 questions were new. Am i correct?

Yes, is correct, sorry, I forgot to put the 21 question that is new.

i passed it too. thanks to g00d0ne on the tips on 2 new questions above.
for me the first 20 questions were all new and not in any of the exam dumps.
these are some of them that i could remember:
1. scenario: your company having conferences thus many guest coming. how do we provision guest with pre-assigned code to access the network
2. same scenarios as above: however conference ended how do we remove the guest id from the network
3. question on the differences phased of ISE deployment and need to know their differences. the question is on a scenario and which model is suitable
4. question on same port having multiple auth/host/domain. whats the command required to enable it

my suggestion is to study the Cisco course guide on the ereader (current on v3.9) and understand the concept. the exam questions just revolves around those even though they are not like to like

@ Edward

Were the new 21 questions in the spoto guide?

Thanks for your attention

Dears, passed exam yesterday, about 25 new questions, total 61 questions, new questions focused on BYOD, Posture & Guest Access.

Dears,

Please i need dump my exam next weekend.

abdallah dot khaled 2020 at hot.mai.l dot co.m

Please send me an updated Dump at getu84524 at gmail.com

someone has the lastest dumps? please..

PL i L2P have test from december and it is unactual, dont buy, they dont give back money!!!!

@ Ricky Sandhu, can you please share the new questions and the practical ones from the dump?

Hello, where is the 103q version?

Guys any one try dumps from dumpsbase

@ Edward

you bought the dump from spoto and found 21 new question in exam not included at Spoto dump ?

@Youk

congratulations, which dump you used ?

Anyone have the latest valid dumps?

Thanks all for sharing the new questions. I saw new questions mentioned by g00done, AliG and parrain5500. Although there’re new questions (around 2x), most of them are not complicated and the answer are quite obvious. I used the offical study guide and the udxxy course for exam preparation. Dont worry too much for the exam.

Hi all, I passed the exam

All questions were in these dumps 2-3 questions were new

at nu . t k

just finished my exam today Passed with 9X5, a lot of new questions about Guest Services (easy), TACACS (New questions about commands levels 0 – 15 with images), D&D EAP-TLS VS MSCHAPv2, i used the dumpsbase <– around 40 questions from there, using the 103Q, enought to pass.

Hi all, can you please share the valid dump for SISE 300-715

Thank you

Hi SISE300-715,

Can you share your dumpsbase please ?

My email address hahihe75 at gmail dot com

Regards

How come no one is sharing this info to get as a PDF?

To respond to @JDUB comment (page 2) and @EFS comment (page 2) to this question as show below:

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

A. The primary node restarts
B. The secondary node restarts.
C. The primary node becomes standalone
D. Both nodes restart.

Explanation:

https://www.cisco.com/c/en/us/td/docs/security/ise/1-1-1/installation_guide/ise_install_guide/ise_deploy.html

if your deployment has two nodes and you deregister the secondary node, both nodes in this primary- secondary pair are restarted. (The former primary and secondary nodes become standalone.)

The correct answer is either B or D I know.
After some research I didn’t find anything about the answer B -> “Both nodes restart”. The link to Cisco ISE admin guide 1.1 is unavailable.
Based on Cisco admin guide 2.7 -> https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_deployment.html

I read this so the answer could be now B – the secondary node restarts”. :
Effects of Modifying Nodes in Cisco ISE
When you make any of the following changes to a node in a Cisco ISE ISE, that node restarts, which causes a delay:

Register a node (Standalone to Secondary)

Deregister a node (Secondary to Standalone)

Change a primary node to Standalone (if no other nodes are registered with it; Primary to Standalone)

Promote an Administration node (Secondary to Primary)

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?

A. The primary node restarts
B. The secondary node restarts.
C. The primary node becomes standalone
D. Both nodes restart.

Based on Cisco admin guide 2.7 I think the good answer could be B – the secondary node restarts :

Effects of Modifying Nodes in Cisco ISE:
When you make any of the following changes to a node in a Cisco ISE ISE, that node restarts, which causes a delay:

Register a node (Standalone to Secondary)

Deregister a node (Secondary to Standalone)

Change a primary node to Standalone (if no other nodes are registered with it; Primary to Standalone)

Can someone please share the dump or PDF?

pisgone at gmail dot com

Anyone know if spoto dump is accurate as of 3/21/2021?

Hi guys,

What occurs when a Cisco ISE distributed deployment has two nodes and the secondary node is deregistered?
A. The primary node restarts
B. The secondary node restarts.
C. The primary node becomes standalone
D. Both nodes restart.

What is correct answer ? B or D ? Please add an explaination in your reply.

—————————————————————————-

Which two components are required for creating a Native Supplicant Profile within a BYOD flow? (Choose two)
A. Windows Settings
B. Connection Type
C. iOS Settings
D. Redirect ACL
E. Operating System

What is correct answer ? B&E or C&E ? Please add an explaination in your reply.

—————————————————————————-

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two)

A. hotspot
B. new AD user 802 1X authentication
C. BYOD
D. guest AUP

Could you confirm that the correct answer are A & D with an explaination please?

Hi guys,

In which scenario does Cisco ISE allocate an Advanced license?
A. guest services with dACL enforcement
B. endpoint authorization using SGA enforcement
C. dynamic device profiling
D. high availability Administrator nodes

Could you confirm that the correct answer is C ? I’m unsure with the answer B.

—————————————————————————-

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two.)

A. The device queries the internal identity store.
B. The Cisco ISE server queries the internal identity store.
C. The device queries the internal identity store.
D. The Cisco ISE server queries the external identity store.
E. The device queries the Cisco ISE authorization server.

As per documentation, the correct answers are B & D. Someone can confirm ?
https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_device_admin.html#concept_9B1DD5A7AD9C445AAC764722E6E7D32A

—————————————————————————-

what happen when an internal user is configured with an external identity store for authentication but an engineer uses the cisco ise admin portal to select an internal identity store as the identity source?
A. Authentication is granted
B. Authentication failed
C. Authentication is redirected to an external identity store
D. Authentication is redirected to an external identity store

Not sure about this question. If someone have the correct answer with explaination please.

—————————————————————————-

A network engineer is implementing cisco ISE and needs to configure 802.1x. the ports settings are configured for port-based authentication. which command should be used to complete this configuration?
A. aaa authentication dot1x default group radius
B. dot1x system-auth-control
C. authentication port-control auto
D. dot1x pae authenticator

Not sure about the correct answer, either A or B ? Someone can confirm ?

Hi guys,

In which scenario does Cisco ISE allocate an Advanced license?
A. guest services with dACL enforcement
B. endpoint authorization using SGA enforcement
C. dynamic device profiling
D. high availability Administrator nodes

Could you confirm that the correct answer is C ? I’m unsure with the answer B.

—————————————————————————-

Which two actions occur when a Cisco ISE server device administrator logs in to a device? (Choose two.)

A. The device queries the internal identity store.
B. The Cisco ISE server queries the internal identity store.
C. The device queries the internal identity store.
D. The Cisco ISE server queries the external identity store.
E. The device queries the Cisco ISE authorization server.

As per documentation, the correct answers are B & D. Someone can confirm ?
https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ise_27_admin_guide/b_ISE_admin_27_device_admin.html#concept_9B1DD5A7AD9C445AAC764722E6E7D32A

@with0ut spaces

Which dump is enough ?