exam questions

Exam 300-715 All Questions

View all questions & answers for the 300-715 exam

Exam 300-715 topic 1 question 315 discussion

Actual exam question from Cisco's 300-715
Question #: 315
Topic #: 1
[All 300-715 Questions]

An engineer configures Cisco ISE and Cisco Catalyst switches to enforce Cisco TrustSec policies. The engineer must use a nondisruptive deployment approach for new devices by deploying TrustSec policies in staging, preproduction, and production. Which action must be taken to complete the configuration?

  • A. Configure Security Group Tag Exchange Protocol on the new devices and integrate the devices in groups with Cisco ISE.
  • B. Configure policy matrices in Cisco ISE and assign the new devices to the policy matrices.
  • C. Integrate the new devices in staging, preproduction, and production network device groups.
  • D. Configure a different security group tag for the new devices in the staging, preproduction, and production stages.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Cachaman
5 days, 18 hours ago
Selected Answer: C
Correct answer is C. The key here is nondisruptive. As soon as you enable SXP, the sw will get all the IP-to-SGT mappings and this could potentially cause issues if for some reason the switch gets the Trustsec policy. Staging: Add all the AAA+CTS Config (Validate local SGTs) Pre-prod: Enable SXP to validate the SW is getting all the SGT info Local+SXP (No TrustSec policy) Prod: Push the TrustSec Policy. A- makes sense, but in may opinion, if you enable SXP day one could be risky
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago