Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 171:

  What are two functions of Diagnostic tool?

  A. enable
  B. network down
  C. TCP dump
  D. Execute network device command
  C. TCP dump
  D. Execute network device command

• Question 172:

  Wireless client supplicants attempting to authenticate to a wireless network are generating excessive log messages. Which three WLC authentication settings should be disabled? (Choose three.)

  A. RADIUS Server Timeout
  B. RADIUS Aggressive-Failover
  C. Idle Timer
  D. Session Timeout
  E. Client Exclusion
  F. Roaming
  B. RADIUS Aggressive-Failover
  C. Idle Timer
  D. Session Timeout

• Question 173:

  Which characteristic of static SGT classification is true?

  A. uses MAB
  B. maps a tag to an IP address
  C. maps a tag to a MAC address
  D. uses web authentication
  A. uses MAB

• Question 174:

  Scenario:

  Currently, many users are expehecing problems using their AnyConnect NAM supplicant to login to the network. The rr desktop support staff have already examined and vehfed the AnyConnect NAM configuration is correct. In this simulation,

  you are tasked to examine the various ISE GUI screens to determine the ISE current configurations to help isolate the problems. Based on the current ISE configurations, you will need to answer three multiple choice questions.

  To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI. Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation. Not all the

  links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens. To view some larger GUI screens, use

  the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation.

  

  

  Which of the following statement is correct?

  A. Currently,IT users who successfully authenticate will have their packets tagged withaSGTof3.
  B. Currently,ITusers who successfully authenticate will be assigned to VLAN 9.
  C. Currently, any domain administrator who successfully authenticate will be assigned to VLAN 10.
  D. Computers belonging to the secure-x domain which passes machine authentication but failed user authentication will have the Employee_Restricted_DACL applied.
  E. Print Servers matching the Linksys-PrintServer identity group will have the following access restrictions:permit icmp any host 10.10.2.20 permit tcp any host 10.10.2.20 eq 80 permit icmp any host 10.10.3.20 permit tcp any host 10.10.3.20 eq 80 deny ip any any
  C. Currently, any domain administrator who successfully authenticate will be assigned to VLAN 10.

• Question 175:

  How does the device sensor send information to a RADIUS server?

  A. Accounting
  B. Authorization
  C. Analyzer
  D. Collector
  A. Accounting

• Question 176:

  Which three features should be enabled as best practices for MAB? (Choose three.)

  A. MD5
  B. IP source guard
  C. DHCP snooping
  D. storm control
  E. DAI
  F. URPF
  B. IP source guard
  C. DHCP snooping
  E. DAI

• Question 177:

  Which two endpoint operating systems are supported during BYOD onboarding? (Choose two.)

  A. Red Hat Enterprise Linux
  B. BlackBerry
  C. Nook
  D. Microsoft Windows
  E. Android
  A. Red Hat Enterprise Linux
  E. Android

• Question 178:

  Which action is a Cisco recommended practice while attempting to increase efficiency on the monitoring nodes?

  A. Back up data and transfer to a remote repository on regular basis
  B. Remove endpoints when not active.
  C. Re-index the data on a regular basis.
  D. Compress the data regularly
  D. Compress the data regularly

• Question 179:

  What is a feature of Cisco WLC and IPS synchronization?

  A. Cisco WLC populates the ACLs to prevent repeat intruder attacks.
  B. The IPS automatically send shuns to Cisco WLC for an active host block.
  C. Cisco WLC and IPS synchronization enables faster wireless access.
  D. IPS synchronization uses network access points to provide reliable monitoring.
  B. The IPS automatically send shuns to Cisco WLC for an active host block.

• Question 180:

  What is required to implement Monitor Mode in a wireless network?

  A. Open authentication must be configured via Cisco WLC CLI.
  B. Wireless Monitor Mode policy should be enabled within Cisco ISE.
  C. Monitor mode in a wireless network is not possible.
  D. Cisco WLC should have this feature enabled inside the security properties for the WLAN.
  C. Monitor mode in a wireless network is not possible.