Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 151:

  A network security engineer is considering configuring 802.1x for security. He wants to use single host for data and single host for voice. Which port authentication method he use?

  A. Single host
  B. Multi host
  C. Multi auth
  D. Multi-domain
  D. Multi-domain

• Question 152:

  Which two posture redirect ACLs and remediation DACLs must be pushed from Cisco ISE to a Cisco IOS switch if the endpoint must remediate itself. The ISE IP address is 10.201.228.76 and the IP address of the remediating server is

  10.201.229.1. (Choose two.)

  A. ip access-l ex ACL-POSTURE-REDIRECT deny udp any any eq domain deny ip any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443
  B. ip access-l ex ACL-POSTURE-REDIRECT deny udp any any eq domain deny ip any host 10.201.228.76 deny ip any host 10.201.229.1 permit tcp any any eq 80 permit tcp any any eq 443
  C. ip access-l ex ACL-POSTURE-REDIRECT deny udp any any eq domain permit ip any host 10.201.228.76 permit ip any host 10.201.229.1 deny ip any any
  D. POSTURE_REMEDIATION DACL permit udp any any eq domain permit tcp any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443
  E. POSTURE_REMEDIATION DACL permit udp any any eq domain deny tcp any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443 permit ip any host 10.210.229.1
  F. POSTURE_REMEDIATION DACL permit udp any any eq domain deny tcp any host 10.201.228.76 deny ip any host 10.210.229.1 permit tcp any any eq 80 permit tcp any any eq 443
  B. ip access-l ex ACL-POSTURE-REDIRECT deny udp any any eq domain deny ip any host 10.201.228.76 deny ip any host 10.201.229.1 permit tcp any any eq 80 permit tcp any any eq 443
  D. POSTURE_REMEDIATION DACL permit udp any any eq domain permit tcp any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443

• Question 153:

  What are two advantages of a single-SSID deployment over a multi-SSID implementation? (Choose two.)

  A. Only single-SSID deployments allow the user to verify the identity of the BYOD server.
  B. Single-SSID deployments are more appropriate for BYOD environments.
  C. Single-SSID deployments offer a more secure connection experience than multi-SSID implementations.
  D. Single-SSID deployments are more appropriate for clients that are already configured for wired 802.1x on another network.
  E. Single-SSID deployments provide a better experience for users of iOS devices.
  D. Single-SSID deployments are more appropriate for clients that are already configured for wired 802.1x on another network.
  E. Single-SSID deployments provide a better experience for users of iOS devices.

• Question 154:

  Which components must be selected for a client provisioning policy to do a Posture check on the Cisco ISE?

  A. Configuration Wizard, Wizard Profile
  B. Remediation Actions, Posture Requirements
  C. Operating System, Posture Requirements
  D. Agent, Profile, Compliance Module
  D. Agent, Profile, Compliance Module

• Question 155:

  Which option in the SSID must be enable to immediately connect to the corp SSID in DUAL SSID deployment?

  A. AP Fallback
  B. SSID fast transition
  C. AAA override
  D. option
  C. AAA override

• Question 156:

  Which command in the My Devices Portal can restore a previously lost device to the network?

  A. Reset
  B. Found
  C. Reinstate
  D. Request
  C. Reinstate

• Question 157:

  Which ISE feature is used to facilitate a BYOD deployment?

  A. self-service personal device registration and onboarding
  B. Guest Service Sponsor Portal
  C. Local Web Auth
  D. Guest Identity Source Sequence
  A. self-service personal device registration and onboarding

• Question 158:

  Which advanced authentication setting is needed to allow an unknown device to utilize Central WebAuth?

  A. If Authentication failed > Continue
  B. If Authentication failed > Drop
  C. If user not found > Continue
  D. If user not found > Reject
  C. If user not found > Continue

• Question 159:

  Which type of remediation does Windows Server Update Services provide?

  A. automatic remediation B. administrator-initiated remediation
  C. redirect remediation
  D. central Web auth remediation
  A. automatic remediation B. administrator-initiated remediation

• Question 160:

  Which two answers are potential results of an attacker that is performing a DHCP server spoofing attack? (Choose two.)

  A. ability to selectively change DHCP options fields of the current DHCP server, such as the giaddr field.
  B. DoS
  C. excessive number of DHCP discovery requests
  D. ARP cache poisoning on the router
  E. client unable to access network resources
  B. DoS
  E. client unable to access network resources