Study References

 

Cisco 300-715 Certification Exam Syllabus


Section

Weight

Objectives

Architecture and Deployment

10%

- Configure personas

- Describe deployment options

- Describe hardware and virtual machine performance specifications

- Describe zero-touch provisioning

Policy Enforcement

25%

- Configure native AD and LDAP

- Describe identity store options

  1. LDAP
  2. AD
  3. PKI
  4. Multifactor authentication
  5. Local
  6. SAML IDP
  7. Rest ID

- Configure wireless network access using 802.1X
- Configure wired network access using 802.1X and IBNS 2.0

  1. Monitor mode
  2. Low impact
  3. Closed mode

- Implement MAB
- Configure Cisco TrustSec
- Configure policies including authentication and authorization profiles

Web Auth and Guest Services

15%

- Configure web authentication

- Configure guest access services

- Configure sponsor and guest portals

Profiler

15%

- Implement profiler services

- Implement probes

- Implement CoA

- Configure endpoint identity management

BYOD

15%

- Describe Cisco BYOD functionality

  1. Use cases and requirements
  2. Solution components
  3. BYOD flow

- Configure BYOD device on-boarding using internal CA with Cisco switches and Cisco wireless LAN controllers - Configure certificates for BYOD - Configure block list/allow list

Endpoint Compliance

10%

- Describe endpoint compliance, posture services, and client provisioning

- Configure posture conditions and policy, and client provisioning

- Configure the compliance module

- Configure posture agents and operational modes

- Describe supplicant, supplicant options, authenticator, and server

Network Access Device Administration

10%

- Compare AAA protocols

- Configure TACACS+ device administration and command authorization



Books


Comparative Architectures of Centralised and Local Web Authentication

  The choice between Local Web Authentication (LWA) and Centralized Web Authentication (CWA) depends on your need for dynamic policy enforce...