Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 131:

  Why would a Cisco ISE not receive profiling data?

  A. RADIUS accounting is not enabled.
  B. SNMP version is not matched.
  C. RADIUS authentication is not enabled.
  D. SNMP community is not matched.
  A. RADIUS accounting is not enabled.

• Question 132:

  dot1x and which traffic will be passed. It was based on config snippet something as below: switchport x/x authentication port-control auto?

  A. EAPOL cdp and STP
  B. DHCP, EAPOL, HTTP
  C. CDP, DHCP, DNS
  D. CDP, EAPOL, HTTP
  A. EAPOL cdp and STP

• Question 133:

  With which two appliance-based products can Cisco Prime infrastructure integrate to perform centralized management?

  A. Cisco content security appliance
  B. Cisco email security appliance
  C. Cisco wireless location appliance
  D. Cisco Mobility Services Engine
  E. Cisco ISE
  D. Cisco Mobility Services Engine
  E. Cisco ISE

• Question 134:

  You are installing Cisco ISE on nodes that will be used in a distributed deployment. After the initial bootstrap process, what state will the Cisco ISE nodes be in?

  A. Remote
  B. Policy service
  C. Administration
  D. Standalone
  D. Standalone

• Question 135:

  Which two profile attributes can circumstance would an inline posture node LAN Controller that supports Device Sensor? (Choose two.)

  A. LLDP agent information
  B. user agent
  C. DHCP options
  D. open ports
  E. CDP agent information
  F. FQDN
  B. user agent
  C. DHCP options

• Question 136:

  Which two options are EAP methods supported by Cisco ISE? (Choose two.)

  A. EAP-FAST
  B. EAP-TLS
  C. EAP-MS-CHAPv2
  D. EAP-GTC
  A. EAP-FAST
  B. EAP-TLS

• Question 137:

  Which two identity store options allow you to authorize based on group membership? (Choose two).

  A. Lightweight Directory Access Protocol
  B. RSA SecurID server
  C. RADIUS
  D. Active Directory
  A. Lightweight Directory Access Protocol
  D. Active Directory

• Question 138:

  Which keying mechanism is used with downlink MACsec?

  A. MACsec Key Agreement (MKA)
  B. Galogs Counter Mode
  C. Transport Layer Security
  D. Security Association Protocol
  A. MACsec Key Agreement (MKA)

• Question 139:

  An organization is deciding between single or dual SSID solutions for onboarding BYOD devices. Which item must be considered before selecting the dual SSID solution?

  A. Wireless coverage is reduced with dual SSIDs
  B. Additional access points are required for dual SSID.
  C. Dedicated controllers are required for dual SSIDs.
  D. The second SSID adds channel overhead
  D. The second SSID adds channel overhead

• Question 140:

  Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

  A. RADIUS Change of Authorization
  B. device tracking
  C. DHCP snooping
  D. VLAN hopping
  A. RADIUS Change of Authorization