Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 141:

  A Cisco ISE deployment wants to use Active Directory as an external identity source. Which technology is a prerequisite to configure ISE/Active Directory integration?

  A. WINS
  B. NTP
  C. PTP
  D. CHAP
  B. NTP

• Question 142:

  Which three statements about the Cisco ISE profiler are true? (Choose three.)

  A. It sends endpoint data to AAA servers.
  B. It collects endpoint attributes.
  C. It stores MAC addresses for endpoint systems.
  D. It monitors and polices router and firewall traffic.
  E. It matches endpoints to their profiles.
  F. It stores endpoints in the Cisco ISE database with their profiles.
  B. It collects endpoint attributes.
  E. It matches endpoints to their profiles.
  F. It stores endpoints in the Cisco ISE database with their profiles.

• Question 143:

  What is the IEEE security standard for MACsec?

  A. 802.1d
  B. 802.1s
  C. 802.1ac
  D. 802.1ae
  D. 802.1ae

• Question 144:

  Hotspot Question

  In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded. Authentication failed and etc...

  

  

  Which two statements are correct regarding the event that occurred at 2014-05-07 00:22:48.175? (Choose two.)

  A. The DACL will permit http traffic from any host to 10.10.2.20
  B. The DACL will permit http traffic from any host to 10.10.3.20
  C. The DACL will permit icmp traffic from any host to 10.10.2.20
  D. The DACL will permit icmp traffic from any host to 10.10.3.20
  E. The DACL will permit https traffic from any host to 10.10.3.20
  A. The DACL will permit http traffic from any host to 10.10.2.20
  E. The DACL will permit https traffic from any host to 10.10.3.20

• Question 145:

  

  Refer to the exhibit. Which status of this authentication session is true?

  A. The authentication session has been initialized and the authentication method is pending.
  B. The authentication method has run and authorization failed.
  C. The authentication method has run and authentication failed.
  D. The authentication session failed to report its status.
  C. The authentication method has run and authentication failed.

• Question 146:

  Refer to the exhibit. In a distributed deployment of Cisco ISE, which column in Figure 1 is used to fill in the Host Name field in Figure 2 to collect captures on Cisco ISE while authenticating the specific endpoint?

  

  A. Server
  B. Network Device
  C. Endpoint ID
  D. Identity
  A. Server

• Question 147:

  Which 802.1X command ignores Access-Reject during EAP authentication?

  A. dot1x pae authenticator
  B. switchport mode access
  C. authentication port-control auto
  D. authentication open
  E. authentication host-mode multi-domain
  D. authentication open

• Question 148:

  A network administrator is seeing a posture status "unknown" for a single corporate machine on the Cisco ISE authentication report, whereas the other machines are reported as "compliant". Which option is the reason for machine being reported as "unknown"?

  A. Posture agent is not installed on the machine.
  B. Posture policy does not support the OS.
  C. Posfure compliance condition is missing on the machine.
  D. Posture service is disabled on Cisco ISE.
  A. Posture agent is not installed on the machine.

• Question 149:

  When is it feasible for a port to be both a guest VLAN and a restricted VLAN?

  A. this configuration scenario is never be implemented
  B. when you have configured the port for promiscuous mode
  C. when private VLANs have been configured to place each end device into different subnets
  D. when you want to allow both types of users the same services
  D. when you want to allow both types of users the same services

• Question 150:

  In a Cisco ISE deployment, which traffic is permitted by the default dynamic ACL?

  A. all IP traffic
  B. management traffic only
  C. TCP traffic only
  D. UDP traffic only
  A. all IP traffic