Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 121:

  Drag and drop each posture assessment outcome from the left onto the appropriate definition on the right.

  Select and Place:

  

  

  ---

  Noncompliant = NAC agent determined something on the endpoint is in violation of the defined security policy Compliant = NAC agent on the endpoint determined that the software assessment on the endpoint adheres to the security policy Unknown = The endpoint failed to report a posture assessment to ISE.

• Question 122:

  Which two Active Directory authentication methods are supported by Cisco ISE? (Choose two.)

  A. MS-CHAPv2
  B. PEAP
  C. PPTP
  D. EAP-PEAP
  E. PPP
  A. MS-CHAPv2
  B. PEAP

• Question 123:

  When configuring NAT, which three protocols that are shown may have limitations or complications when using NAT? (Choose three.)

  A. Kerberos
  B. HTTPS
  C. NTP
  D. SIP
  E. FTP
  F. SQL
  A. Kerberos
  D. SIP
  E. FTP

• Question 124:

  On which type of node does the Cisco ISE sponsor portal reside?

  A. Monitoring node
  B. Inline Policy node
  C. Policy Services node
  D. Administration node
  C. Policy Services node

• Question 125:

  How many bits are in a security group tag?

  A. 64
  B. 8
  C. 16
  D. 32
  C. 16

• Question 126:

  What are three portals provided by PSN? (Choose three.)

  A. Monitoring
  B. Troubleshooting
  C. Sponsor
  D. Guest E. My devices
  F. Admin
  C. Sponsor
  D. Guest E. My devices

• Question 127:

  Which two fields are characteristics of IEEE 802.1AE frame? (Choose two.)

  A. destination MAC address
  B. source MAC address
  C. 802.1AE header in EtherType
  D. security group tag in EtherType
  E. integrity check value
  F. CRC/FCS
  C. 802.1AE header in EtherType
  E. integrity check value

• Question 128:

  When using a DHCP probe in a Cisco ISE deployment, which type of request triggers an endpoint to be reprofiled?

  A. DHCP Inform
  B. REBINDING
  C. RENEWING
  D. INIT-REBOOT
  D. INIT-REBOOT

• Question 129:

  A security administrator wants to profile endpoints and gain visibility into attempted authentications. Which 802.1x mode allows these actions?

  A. monitor mode
  B. high-security mode
  C. closed mode
  D. low-impact mode
  A. monitor mode

• Question 130:

  Which two Cisco ISE administration options are available in the Default Posture Status setting? (Choose two.)

  A. Unknown
  B. Compliant
  C. FailOpen
  D. FailClose
  E. Noncompliant
  B. Compliant
  E. Noncompliant