Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 101:

  How does the use of single connect mode for device authentication improve performance?

  A. It uses a single TCP connection for all TACACS+ communication.
  B. It uses a single VIP on the network access device.
  C. It uses a single TCP connection for all RADIUS communication.
  D. It multiplexes RADIUS requests to the server over a single session.
  A. It uses a single TCP connection for all TACACS+ communication.

• Question 102:

  In an 802. 1X deployment what two components are responsible for facilitating the authentication process? (Choose two.)

  A. MACSec
  B. MAC address
  C. an authentication server
  D. a router
  E. a supplicant
  C. an authentication server
  E. a supplicant

• Question 103:

  Which two statements about administrative access to the Cisco Secure ACS SE are true? (Choose two.)

  A. The Cisco Secure ACS SE supports command-line connections through a serial-port connection.
  B. For GUI access, an administrative GUI user must be created by using the add-guiadmin command.
  C. The Cisco Secure ACS SE supports command-line connections through an Ethernet interface.
  D. An ACL-based policy must be configured to allow administrative-user access.
  E. GUI access to the Cisco Secure ASC SE is not supported.
  B. For GUI access, an administrative GUI user must be created by using the add-guiadmin command.
  D. An ACL-based policy must be configured to allow administrative-user access.

• Question 104:

  Which option is required for inline security group tag propagation?

  A. Cisco Secure Access Control System
  B. hardware support
  C. Security Group Tag Exchange Protocol (SXP) v4
  D. Cisco Identity Services Engine
  B. hardware support

• Question 105:

  Which Cisco IOS Firewall feature allows the firewall to function as a Layer 2 bridge on the network?

  A. zone-based firewall
  B. CBAC
  C. firewall ACL bypass
  D. transparent firewall
  D. transparent firewall

• Question 106:

  An engineer is troubleshooting an issue between the switch and the Cisco ISE where the 802.1X and MAB authentication and authorization are successful. Which command does the network engineer enter in the switch to troubleshoot this issue and look for active sessions?

  A. show dot1x al
  B. show authentication sessions
  C. show epm session summary
  D. show connections detail
  C. show epm session summary

• Question 107:

  Which option is the code field of n EAP packet?

  A. one byte and 1=request, 2=response 3=failure 4=success
  B. two byte and 1=request, 2=response, 3=success, 4=failure
  C. two byte and 1=request 2=response 3=failure 4=success
  D. one byte and 1=request 2=response 3=success 4=failure
  D. one byte and 1=request 2=response 3=success 4=failure

• Question 108:

  Which two features are supported by named access list, but not numbered access list? (Choose two.)

  A. IP options filtering
  B. Timed-Based Access Control
  C. noncontiguous ports
  D. upper-layer session information
  E. Context-Based Access Control
  A. IP options filtering
  C. noncontiguous ports

• Question 109:

  Which RADIUS service type can identify authentication attempts from devices that lack a supplicant?

  A. Ethernet
  B. Wireless-IEEE802.11
  C. Call Check
  D. Framed
  C. Call Check

• Question 110:

  Which five portals are provided by PSN? (Choose five.)

  A. guest
  B. sponsor
  C. my devices
  D. blacklist
  E. client provisioning
  F. admin
  G. monitoring and troubleshooting
  A. guest
  B. sponsor
  C. my devices
  D. blacklist
  E. client provisioning