300-710 SNCF Configuration Practice Question
An engineer is configuring an Identity Policy in FMC to enforce user-based access control. Active Directory integration has been established via User Agent, but the engineer notices that some users authenticated via remote access VPN are not being resolved to their IP addresses. Which feature must be integrated into the identity configuration to capture IP-to-user mappings for remote access VPN users?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco Identity Services Engine (ISE) via pxGrid or RADIUS Accounting
Remote Access VPN users authenticate directly to the VPN gateway. To map their dynamic IP addresses to their usernames in FMC, Cisco Adaptive Security Device Manager (ASDM) or FMC must leverage Remote Access connection profiles and ISE/RADIUS accounting or FTD local database integration. Specifically, RADIX/ISE accounting or FTD identity sources handle VPN session user mapping. Within FMC identity policies, captive portal or TS Agent does not track remote VPN pools as effectively as configuring RADIUS/ISE or leveraging the FTD RA VPN user mapping integration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
FMC Captive Portal
Why it's wrong here
Captive portal relies on HTTP/HTTPS browser redirection, which is inefficient and often fails for remote VPN tunnels.
- ✗
Terminal Services Agent (TS Agent)
Why it's wrong here
TS Agent is used for multi-user Citrix or Terminal Server environments, not standard remote access VPN pools.
- ✗
SNMP polling of the DHCP server
Why it's wrong here
SNMP polling does not provide active authentication mappings for VPN clients.
- ✓
Cisco Identity Services Engine (ISE) via pxGrid or RADIUS Accounting
Why this is correct
ISE integration via pxGrid or RADIUS accounting provides user-to-IP mappings for Remote Access VPN sessions.
Visual reference
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
About these practice questions
Courseiva writes every 300-710 SNCF question from scratch — 478 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This 300-710 SNCF practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-710 SNCF exam.