300-715 Exam Dumps - Cisco CCNP Security Questions and Answers

Which RADIUS attribute is used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node ' ?

An engineer troubleshoots a new Central Web Authentication guest WLAN on a Cisco AireOS Wireless LAN Controller. Users authenticate through a self-registration portal on Cisco ISE. Guest users report these issues:

• Users can register successfully but are redirected back to the registration page.

• If a user registers, manually disconnects the device, and then reconnects, the user can access the internet.

What must be configured on the Wireless LAN Controller?

Which two roles are taken on by the administration person within a Cisco ISE distributed environment? (Choose two.)

What are two differences between the RADIUS and TACACS+ protocols ' ? (Choose two.)

An engineer needs to configure a compliance policy on Cisco ISE to ensure that the latest encryption software is running on the C drive of all endpoints. Drag and drop the configuration steps from the left into the sequence on the right to accomplish this task.

A security administrator is using Cisco ISE to create a BYOD onboarding solution for all employees who use personal devices on the corporate network. The administrator generates a Certificate Signing Request and signs the request using an external Certificate Authority server. Which certificate usage option must be selected when importing the certificate into ISE?

What must be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

An administrator is configuring new probes to use with Cisco ISE and wants to use metadata to help profile the endpoints. The metadata must contain traffic information relating to the endpoints instead of industry-standard protocol information Which probe should be enabled to meet these requirements?

Which two features are available when the primary admin node is down and the secondary admin node has not been promoted? (Choose two.)

A laptop was stolen and a network engineer added it to the block list endpoint identity group What must be done on a new Cisco ISE deployment to redirect the laptop and restrict access?