How should I use these Network Access Device Administration practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

SISE · topic practice

Network Access Device Administration practice questions

Q: Can I practise just Network Access Device Administration questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Network Access Device Administration domain.

Practise Cisco Implementing and Configuring Cisco Identity Services Engine (SISE, 300-715, CCNP Security) (SISE) Network Access Device Administration practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Network Access Device Administration

Practice 10 questions Browse domain →

What the exam tests

What to know about Network Access Device Administration

Network Access Device Administration questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Network Access Device Administration exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Network Access Device Administration questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Network Access Device Administration explanation →

Which menu path in Cisco ISE is used to define a new Network Device Group?

Trap 1: Operations > TACACS Livelogs

This is for troubleshooting.

Trap 2: Administration > Identity Management

This is for users and groups, not network devices.

Trap 3: Policy > Policy Elements > Results

Results are for Authorization profiles, not device groups.

Study all Network Access Device Administration common traps →

A
Operations > TACACS Livelogs
Why wrong: This is for troubleshooting.
B
Administration > Identity Management
Why wrong: This is for users and groups, not network devices.
C
Policy > Policy Elements > Results
Why wrong: Results are for Authorization profiles, not device groups.
D
Administration > Network Resources > Network Device Groups
This is the correct navigation path.

Network Access Device Administration practice questions

What to know about Network Access Device Administration

Common Network Access Device Administration exam traps

Network Access Device Administration questions

Which menu path in Cisco ISE is used to define a new Network Device Group?

What is the primary function of the TACACS+ 'Shared Secret' configured on both the Cisco ISE and the Network Access Device?

You need to ensure that TACACS+ authentication requests for network devices are only accepted if the device IP matches a specific Network Device Group. Where do you configure the Device Type condition?

A network engineer reports that they can log into a switch via TACACS+, but cannot run any commands. What is the most likely cause?

You want to use TACACS+ for administrative access. Which protocol feature distinguishes TACACS+ from RADIUS for device administration?

When defining a Shell Profile for a TACACS+ administrator, which setting ensures the user is placed into privilege level 15 immediately upon login?

When troubleshooting TACACS+ authentication issues in Cisco ISE, which log file should you monitor to see the specific request details and the policy match result?

You are configuring a TACACS+ command set to restrict an administrator from running 'show running-config' on Cisco switches. Which match condition ensures that this specific command is blocked while allowing other 'show' commands?

Which port does Cisco ISE use by default for TACACS+ communication with network devices?

If a user is assigned a Shell Profile with a specific 'Auto-Command' configured, what happens when they log into the network device?

When adding a network device to ISE, you select the 'TACACS+ Authentication Settings' checkbox. What is the impact of this action?

You are configuring a policy to allow 'Read-Only' access for junior admins. You have created a Command Set that allows 'show' commands. What else is required to implement 'Read-Only' access correctly?

You are troubleshooting a scenario where an admin cannot execute a specific command despite the Command Set having 'Permit' for that command. What is a common reason?

How does Cisco ISE handle requests that do not match any configured TACACS+ Authorization Policy?

Which attribute in a Shell Profile is used to control whether a user can perform 'enable' commands?

In the context of TACACS+, what is the purpose of the 'Network Device Group'?

Where are the TACACS+ accounting logs stored and viewed in the ISE management console?

How can you verify that ISE is receiving TACACS+ requests from a specific switch?

What is the benefit of using multiple TACACS+ Policy Sets?

You need to allow users to run commands that start with 'show' but deny any 'show' commands that contain 'password'. How should the Command Set be configured?

Track your progress over time

Start a Network Access Device Administration only practice session

Related SISE topic practice pages

Network Access Device Administration practice questions

BYOD practice questions

Endpoint Compliance practice questions

Web Auth And Guest Services practice questions

Profiler practice questions

Policy Enforcement practice questions

Architecture And Deployment practice questions

SISE fundamentals practice questions

SISE scenario practice questions

SISE troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid