SkillTestPro | CCNP Security 300-715 SISE Practice Test 13

CCNP Security 300-715 SISE Practice Test 13 (Hard) - Configuring Guest Access Services and Guest Types

CISCO CCNP Security Exam Logo

1 / 10

Which Cisco ISE configuration object defines attributes such as maximum account duration, allowed login time, and applicable authorization for a category of guest users?

A guest type

A client provisioning resource, which is an agent/module package rather than guest account attributes

A network device group, which categorizes devices rather than guest account attributes

A certificate authentication profile, which maps certificate fields rather than guest account attributes

An authentication policy rule, which governs credential verification rather than guest account attributes

A sponsor group, which defines sponsor privileges rather than guest account attributes directly

2 / 10

Which Cisco ISE feature allows a designated employee to create and manage temporary guest accounts on behalf of visitors, without needing full ISE administrator privileges?

The client provisioning policy page, which manages agent deployment rather than guest accounts

The TrustSec matrix page, which manages SGACLs rather than guest accounts

The ISE administrative GUI's system settings page, requiring full super admin rights

The profiling policy page, which classifies endpoints rather than manages guest accounts

The certificate authentication profile page, which maps certificate fields rather than manages guest accounts

The sponsor portal, used by users assigned to a sponsor group

3 / 10

Which Cisco ISE object defines which specific privileges (such as which guest types can be created and how many accounts can be created) are granted to a sponsor user?

An authorization profile, which defines network access results rather than sponsor privileges

A posture policy, which evaluates endpoint compliance rather than defining sponsor privileges

An identity source sequence, which orders identity stores rather than defining sponsor privileges

A profiling policy, which classifies endpoints rather than defining sponsor privileges

A guest type, which defines guest account attributes rather than sponsor privileges

A sponsor group

4 / 10

Which guest access workflow allows a visitor to create their own temporary account directly at a self-service kiosk or portal without a sponsor's direct involvement, subject to policy-defined restrictions?

Sponsor-created guest access, which requires a sponsor to create the account

TrustSec SGACL enforcement, which is unrelated to guest account creation

MAC Authentication Bypass, which does not involve a self-registration portal

Self-registration guest access

Certificate-based EAP-TLS authentication, which is unrelated to guest self-service registration

TACACS+ device administration, which is unrelated to guest network access

5 / 10

Which guest account attribute would a sponsor typically configure to control how long a specific guest account remains valid before automatically expiring?

The guest's chosen desktop wallpaper for the duration of their visit, which does not align with best practices

The account duration (start and expiration date/time), bounded by the guest type's maximum allowed duration

The guest's favorite color, as recorded for cosmetic purposes only

The guest's assigned parking space number

The guest's preferred background music genre

The guest's preferred font size for printed materials

6 / 10

Which notification method can Cisco ISE commonly use to deliver guest account credentials to a visitor after a sponsor creates the account?

Email or SMS notification containing the guest's username and password (or a link to retrieve them)

A postal mail letter that always takes several weeks to arrive, with no faster option available

A physical fax transmission exclusively, with no email or SMS option available

A handwritten note exclusively, with no digital notification capability at all

A notification sent exclusively via a pager network with no other option

An announcement made exclusively over a building-wide public address system

7 / 10

Which security practice is important when defining a guest type's maximum account duration and access scope for visitors in a corporate environment?

Always disabling any logging of guest account activity to reduce storage usage

Scoping the duration and access to the minimum necessary for the visit's legitimate purpose, avoiding indefinite or overly broad guest access

Always granting guest accounts unlimited duration with no expiration whatsoever

Always allowing guest accounts to create additional guest accounts with no sponsor oversight at all

Always assigning every guest account full administrative privileges within ISE itself

Always granting guest accounts full access to internal corporate servers with no restriction at all, under normal operating conditions, which is inconsistent with expected behavior

8 / 10

Which reporting capability in Cisco ISE would help an administrator audit which sponsor created a particular guest account and when it was created?

The organization's unrelated building access badge log with no ISE integration, which is not the standard approach

The guest portal's background image configuration

The printer's toner level indicator

The wireless access point's physical firmware version display

The switch's spanning tree topology diagram

Guest account and sponsor activity reports/logs within ISE's reporting features

9 / 10

Which combination of guest access design elements would provide a secure and auditable visitor Wi-Fi experience for a corporate office using Cisco ISE?

Guest accounts granted the same authorization profile as full-time employees with no distinction

A guest type with an appropriately limited maximum duration and scoped authorization profile, a sponsor group restricting which employees can create guest accounts, and centralized web authentication with account notification via email or SMS

Self-registration enabled with no policy-defined restrictions on account duration or scope at all

Guest account creation with no logging or audit trail of any kind

No notification mechanism at all, requiring guests to guess their own credentials

Unlimited-duration guest accounts creatable by any employee with no sponsor group restriction at all, in accordance with common design practices, which is not the standard approach, in accordance with common design practices, in most deployment scenarios

10 / 10

Which factor would most influence whether an organization enables guest self-registration versus requiring all guest accounts to be sponsor-created?

The color scheme of the guest portal's login page

The font used in the organization's internal newsletter

The average outdoor temperature during the visit

The number of parking spaces available in the visitor lot

The specific brand of wireless access points installed in the building, which is not the standard approach, in a properly maintained environment

The organization's risk tolerance and desired level of employee oversight over who is granted temporary network access

Your score is

The average score is 0%