Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 161:

  What two values does Cisco recommend you adjust and test to set the optimal timeout value for your network's specific 802.1X MAB deployment? (Choose two.)

  A. Max-reauth-req
  B. Supp-timeout
  C. Max-req
  D. Tx-period
  E. Server-timeout
  A. Max-reauth-req
  D. Tx-period

• Question 162:

  A properly configured Cisco ISE Policy Service node is not receiving any profile data from a Cisco switch that runs Device Sensor. Which option is the most likely reason for the failure?

  A. Syslog is configured for the Policy Administration Node.
  B. RADIUS Accounting is disabled.
  C. The SNMP community strings are mismatched.
  D. RADIUS Authentication is misconfigured.
  E. The connected endpoints support CDP but not DHCP.
  B. RADIUS Accounting is disabled.

• Question 163:

  Prime Uses Which protocol for devices discovery ?

  A. STP
  B. CDP
  C. RARP
  D. LLDP
  C. RARP
  D. LLDP

• Question 164:

  Hotspot Question

  In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded. Authentication failed and etc...

  

  Which four statements are correct regarding the event that occurred at 2014-05-07 00:19:07.004? (Choose four.)

  A. The IT_Corp authorization profile were applied.
  B. The it1 user was matched to the IT_Corp authorization policy.
  C. The it1 user supplicant used the PEAP (EAP-MSCHAPv2) authentication method.
  D. The it1 user was authenticated using MAB.
  E. The it1 user was successfully authenticated against AD1 identity store.
  F. The it1 user machine has been profiled as a Microsoft-Workstation.
  G. The it1 user machine has passed all the posture assessement tests.
  A. The IT_Corp authorization profile were applied.
  C. The it1 user supplicant used the PEAP (EAP-MSCHAPv2) authentication method.
  E. The it1 user was successfully authenticated against AD1 identity store.
  F. The it1 user machine has been profiled as a Microsoft-Workstation.

• Question 165:

  A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and an employee SSID is used for company network access. How is the layer 2 security of the provisioning SSID configured?

  A. 802.1X
  B. Open
  C. WPA2
  D. MAC filtering disabled
  B. Open

• Question 166:

  The NAC Agent v4.9.x uses which ports and protocols to communicate with an ISE Policy Service Node?

  A. tcp/8905, http/80, ftp/21
  B. tcp/8905, http/80, https/443
  C. udp/8905, telnet/23, https/443
  D. udp/8906, http/80, https/443
  B. tcp/8905, http/80, https/443

• Question 167:

  Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose three.)

  A. IOS-7-PROXY_DROP
  B. AP-1-AUTH_PROXY_DOS_ATTACK
  C. MKA-2-MACDROP
  D. AUTHMGR-5-MACMOVE
  E. ASA-6-CONNECT_BUILT
  F. AP-1-AUTH_PROXY_FALLBACK_REQ
  B. AP-1-AUTH_PROXY_DOS_ATTACK
  D. AUTHMGR-5-MACMOVE
  F. AP-1-AUTH_PROXY_FALLBACK_REQ

• Question 168:

  Certain endpoints are missing DHCP profiling data.

  Which option describes what can be used to determine if DHCP requests from clients are reaching Cisco ISE?

  A. output of show interface gigabitEthernet 0 from the CLI
  B. output of debug logging all 7 from the CLI
  C. output of show logging application profiler.log from the CLI
  D. the TCP dump diagnostic tool through the GUI
  E. the posture troubleshooting diagnostic tool through the GUI
  D. the TCP dump diagnostic tool through the GUI

• Question 169:

  When you select Centralized Web Auth in the ISE Authorization Profile, which two components host the web authentication portal? (Choose two.)

  A. ISE
  B. the WLC
  C. the access point
  D. the switch
  E. the endpoints
  B. the WLC
  D. the switch

• Question 170:

  Which configuration is required in the Cisco ISE Authentication policy to allow Central Web Authentication?

  A. Dot1x and if authentication failed continue
  B. MAB and if user not found continue
  C. MAB and if authentication failed continue
  D. Dot1x and if user not found continue
  B. MAB and if user not found continue