Exam Deatils

  • Exam Code
    :300-208
  • Exam Name
    :Implementing Cisco Secure Access Solutions
  • Certification
    :CCNP Security
  • Vendor
    :Cisco
  • Total Questions
    :455 Q&As
  • Last Updated
    :Aug 11, 2019

Cisco CCNP Security 300-208 Questions & Answers

  • Question 1:

    Drag and drop the posture remediation actions from the left onto the correct descriptions on the right.

    Select and Place:

  • Question 2:

    Drag and drop each posture assessment outcome from the left onto the appropriate definition on the right.

    Select and Place:

  • Question 3:

    Drag and drop the portals from the left onto the correct portal tasks on the right.

    Select and Place:

  • Question 4:

    Drag and drop the BYOD user experiences on an iPad on the left into the correct order on the right.

    Select and Place:

  • Question 5:

    Drag and drop each guest user login screen from the left onto the correct description on the right.

    Select and Place:

  • Question 6:

    A security engineer is deploying Cisco ISE for a company's guest user services. Drag and drop the Cisco ISE persona on the left onto its function on the right.

    Select and Place:

  • Question 7:

    CORRECT TEXT

    The Secure-X company has recently successfully tested the 802.1X authentication deployment using the Cisco Catalyst switch and the Cisco ISEv1.2 appliance. Currently, each employee desktop is connected to an 802.1X enabled switch

    port and is able to use the Cisco AnyConnect NAM 802.1Xsupplicantto log in and connect to the network.

    Currently, a new testing requirement is to add a network printer to the Fa0/19 switch port and have it connect to the network. The network printer does not support 802.1X supplicant. The Fa0/19 switch port is now configured to use 802.1X

    authentication only.

    To support this network printer, the Fa0/19 switch port configuration needs to be edited to enable the network printer to authenticate using its MAC address. The network printer should also be on VLAN 9.

    Another network security engineer responsible for managing the Cisco ISE has already per-configured all the requirements on the Cisco ISE, including adding the network printer MAC address to the Cisco ISE endpoint database and etc...

    Your task in the simulation is to access the Cisco Catalyst Switch console then use the CLI

    to:

    Enable only the Cisco Catalyst Switch Fa0/19 switch port to authenticate the network printer using its MAC address and:

    Ensure that MAC address authentication processing is not delayed until 802.1Xfails

    Ensure that even if MAC address authentication passes, the switch will still perform 802.1X authentication if requested by a 802.1X supplicant

    Use the required show command to verify the MAC address authentication on the Fa0/19 is successful

    The switch enable password is Cisco For the purpose of the simulation, to test the network printer, assume the network printer will be unplugged then plugged back into the Fa0/19 switch port after you have finished the required configurations on the Fa0/19 switch port. Note: For this simulation, you will not need and do not have access to the ISE GUI To access the switch CLI, click the Switch icon in the topology diagram

  • Question 8:

    CORRECT TEXT

    The Secure-X company has started to tested the 802.1X authentication deployment using the Cisco Catalyst 3560-X layer 3 switch and the Cisco ISEvl2 appliance. Each employee desktop will be connected to the 802.1X enabled switch port and will use the Cisco AnyConnect NAM 802.1X supplicant to log in and connect to the network. Your particular tasks in this simulation are to create a new identity source sequence named AD_internal which will first use the Microsoft Active Directory (AD1) then use the ISE Internal User database. Once the new identity source sequence

    has been configured, edit the existing DotlX authentication policy to use the new AD_internal identity source sequence.

    The Microsoft Active Directory (AD1) identity store has already been successfully configured, you just need to reference it in your configuration.

    In addition to the above, you are also tasked to edit the IT users authorization policy so IT users who successfully authenticated will get the permission of the existing IT_Corp authorization profile.

    Perform this simulation by accessing the ISE GUI to perform the following tasks:

    Create a new identity source sequence named AD_internal to first use the Microsoft Active Directory (AD1) then use the ISE Internal User database

    Edit the existing Dot1X authentication policy to use the new AD_internal identity source sequence:

    If authentication failed-reject the access request

    If user is not found in AD-Drop the request without sending a response

    If process failed-Drop the request without sending a response

    Edit the IT users authorization policy so IT users who successfully authenticated will get the permission of the existing IT_Corp authorization profile.

    To access the ISE GUI, click the ISE icon in the topology diagram. To verify your configurations, from the ISE GUI, you should also see the Authentication Succeeded event for the it1 user after you have successfully defined the DotlX authentication policy to use the Microsoft Active Directory first then use the ISE Internal User Database to authenticate the user. And in the Authentication Succeeded event, you should see the IT_Corp authorization profile being applied to the it1 user. If your configuration is not correct and ISE can't authenticate the user against the Microsoft Active Directory, you should see the Authentication Failed event instead for the it1 user.

    Note: If you make a mistake in the Identity Source Sequence configuration, please delete the Identity Source Sequence then re-add a new one. The edit Identity Source Sequence function is not implemented in this simulation.

    Tips on How to Prepare for the Exams

    Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 300-208 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.