Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 1:

  Which statement about the Cisco ISE BYOD feature is true?

  A. Use of SCEP/CA is optional.
  B. BYOD works only on wireless access.
  C. Cisco ISE needs to integrate with MDM to support BYOD.
  D. Only mobile endpoints are supported.
  A. Use of SCEP/CA is optional.

• Question 2:

  You are managing a network environment in which clients that are successfully obtain a new VLAN IP address.

  Which timer can you use to increase the allowable amount of time for the client to undergo CoA?

  A. keepalive timer
  B. remediation timer
  C. network transaction delay timer
  D. minimum acceptable hold timer
  C. network transaction delay timer

• Question 3:

  Which two types of web portals are related to guest services? (Choose two )

  A. limited access portal
  B. sponsor portal
  C. guest services portal
  D. user portal
  E. admin portal
  B. sponsor portal
  C. guest services portal

• Question 4:

  Which debug command on a Cisco WLC shows the reason that a client session was terminated?

  A. debug dot11 state enable
  B. debug dot1x packet enable
  C. debug client mac addr
  D. debug dtls event enable
  E. debug ap enable cisco ap
  C. debug client mac addr

• Question 5:

  An engineer is investigating an issue with their Posture Run-time Services implementation. Which protocol services are used by NAC Agents to communicate with NAC Servers?

  A. SWISS
  B. IPsec
  C. IKEv2
  D. FIX
  A. SWISS

• Question 6:

  Which Cisco IOS IPS feature allows to you remove one or more actions from all active signatures based on the attacker and/or target address criteria, as well as the event risk rating criteria?

  A. signature event action filters
  B. signature event action overrides
  C. signature attack severity rating
  D. signature event risk rating
  A. signature event action filters

• Question 7:

  Which remediation type ensures that Automatic Updates configuration is turned on Windows clients per security policy to remediate Windows clients for posture compliance?

  A. AS Remediation
  B. File Remediation
  C. Launch Program Remediation
  D. Windows Update Remediation
  E. Windows Server Update Services Remediation
  D. Windows Update Remediation

• Question 8:

  You have configured a Cisco ISE1.2 deployment for self-registration of guest users. What two options can you select from to determine when the account duration timer begins (Choose two)?

  A. Createtime
  B. Firstlogin
  C. Approvaltime
  D. Custom
  E. Starttime
  F. FromCreation
  A. Createtime
  B. Firstlogin

• Question 9:

  Which Cisco ISE 1.x protocol can be used to control admin access to network access devices?

  A. TACACS+
  B. RADIUS
  C. EAP
  D. Kerberos
  A. TACACS+

• Question 10:

  Which three statement about Windows Server Update Services remediation are true?

  A. WSUS can install the latest service pack available
  B. WSUS checks for automatic update configuration on Windows
  C. WSUS checks for client behavior anomalies
  D. WSUS remediates Windows client from a locally manage WSUS server
  E. WSUS remediates Windows client from a Microsoft manage WSUS server
  F. WSUS provides links to update AV/AS
  A. WSUS can install the latest service pack available
  D. WSUS remediates Windows client from a locally manage WSUS server
  E. WSUS remediates Windows client from a Microsoft manage WSUS server