Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 91:

  A network administrator configured DUAL SSID , where the first SSID is used for guest provisioning and the other SSID for Employee provisioning which option he can use for layer 2 security provision?

  A. MAB
  B. 802.X
  C. authentication open
  D. option
  C. authentication open

• Question 92:

  Which 2 options are functional components of the posture service?

  A. Quarantined policy
  B. Posture policy
  C. Client provisioning
  D. Network provisioning
  B. Posture policy
  C. Client provisioning

• Question 93:

  What protecs MacSec Frame?

  A. ICV
  B. MKA
  A. ICV

• Question 94:

  During BYOD flow, where does a Microsoft Windows 8.1 PC download the Network Setup Assistant from?

  A. from Cisco App Store
  B. from Cisco ISE directly
  C. from Microsoft App Store
  D. It uses the native OTA functionality.
  B. from Cisco ISE directly

• Question 95:

  A security engineer has configured a switch port in x closed mode. Which protocol is allowed to pass...?

  A. HTTP
  B. EAPOL
  C. Bootps
  D. ARP
  E. PXE
  B. EAPOL

• Question 96:

  If the user is in a non-compliant state and wants to Get out of quarantine, what must be done?

  A. download posture
  B. download profiling
  C. download mab
  D. download web agent
  A. download posture

• Question 97:

  Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What are the two possible causes of the problem? (Choose two.)

  A. EAP-TLS is not checked in the Allowed Protocols list
  B. Client certificate is not included in the Trusted Certificate Store
  C. MS-CHAPv2-is not checked in the Allowed Protocols list
  D. Default rule denies all traffic
  E. Certificate authentication profile is not configured in the Identity Store
  A. EAP-TLS is not checked in the Allowed Protocols list
  E. Certificate authentication profile is not configured in the Identity Store

• Question 98:

  Which statement about Cisco ISE BYOD is true?

  A. Dual SSID allows EAP-TLS only when connecting to the secured SSID.
  B. Single SSID does not require endpoints to be registered.
  C. Dual SSID allows BYOD for guest users.
  D. Single SSID utilizes open SSID to accommodate different types of users.
  E. Single SSID allows PEAP-MSCHAPv2 for native supplicant provisioning.
  E. Single SSID allows PEAP-MSCHAPv2 for native supplicant provisioning.

• Question 99:

  Which two portals can be configured to use portal FQDN? (Choose two.)

  A. admin
  B. sponsor
  C. guest
  D. my devices
  E. monitoring and troubleshooting
  B. sponsor
  D. my devices

• Question 100:

  An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?

  A. member of
  B. group
  C. class
  D. person
  A. member of