Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 181:

  You are troubleshooting reported connectivity issues from remote users who are accessing corporate headquarters via an IPsec VPN connection. What should be your first step in troubleshooting these issues?

  A. issue a show crypto isakmp policy command to verify matching policies of the tunnel endpoints
  B. ping the tunnel endpoint
  C. run a traceroute to verify the tunnel path
  D. debug the connection process and look for any error messages in tunnel establishment
  B. ping the tunnel endpoint

• Question 182:

  Which three statements about the Cisco wireless IPS solution are true? (Choose three.)

  A. It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point.
  B. It detects spoofed MAC addresses.
  C. It identifies potential RF jamming attacks.
  D. It protects against frame and device spoofing.
  E. It allows the WLC to failover because of congestion.
  B. It detects spoofed MAC addresses.
  C. It identifies potential RF jamming attacks.
  D. It protects against frame and device spoofing.

• Question 183:

  Which probe carries the IP address of the endpoint in the Framed-IP-Address attribute of the payload?

  A. DNS probe
  B. LLDP probe
  C. RADIUS probe
  D. DHCP probe
  C. RADIUS probe

• Question 184:

  Which two of these are potential results of an attacker performing a DHCP server spoofing attack? (Choose two.)

  A. DHCP snooping
  B. DoS
  C. confidentiality breach
  D. spoofed MAC addresses
  E. switch ports being converted to an untrusted state
  B. DoS
  C. confidentiality breach

• Question 185:

  Refer to the exhibit. Which ISE flow mode does this diagram represent?

  

  A. Closed mode
  B. Monitor mode
  C. Application mode
  D. Low-impact mode
  B. Monitor mode

• Question 186:

  Which protocol provides the real time request to the service running on the CA?

  A. DOS
  B. FILE
  C. MAB
  D. OCSP
  D. OCSP

• Question 187:

  Which profiling capability allows you to gather and forward network packets to an analyzer?

  A. collector
  B. spanner
  C. retriever
  D. aggregator
  A. collector

• Question 188:

  When using CA for identity source, which method can be used to provide real-time certificate validation?

  A. X.509
  B. PKI
  C. OCSP
  D. CRL
  D. CRL

• Question 189:

  When is it most appropriate to choose IPS functionality based on Cisco IOS software?

  A. when traffic rates are low and a complete signature is not required
  B. when accelerated, integrated performance is required using hardware ASIC-based IPS inspections
  C. when integrated policy virtualization is required
  D. when promiscuous inspection meets security requirements
  A. when traffic rates are low and a complete signature is not required

• Question 190:

  An administrator is configuring an ASA firewall for to secure access on ASA firewall in the essence of controlling configuration command executed on the Firewall. Which command he will he use?

  A. aaa authorization ssh console
  B. aaa authorization commands
  C. aaa authentication ssh console
  D. aaa authentication exec server-authentication
  D. aaa authentication exec server-authentication