Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 191:

  How many days does Cisco ISE wait before it purges a session from the active session list if no RADIUS Accounting STOP message is received?

  A. 1
  B. 5
  C. 10
  D. 15
  B. 5

• Question 192:

  A network administrator configured DUAL SSID , where the first SSID is used for guest provisioning and the other SSID for Employee provisioning which option he can use for layer 2 security provision?

  A. MAB
  B. 802.1x
  C. authentication open
  D. option
  C. authentication open

• Question 193:

  What represents the default Cisco IOS RADIUS attribute-value pair?

  A. User name= 5, password= 4, NAS-IP Address=4, NAS-Port=5
  B. User name= 0, password= 1, NAS-IP Address=2, NAS-Port=3
  C. User name= 1, password= 2, NAS-IP Address=4, NAS-Port=5
  D. User name= 1, password= 2, NAS-IP Address=3, NAS-Port=4
  C. User name= 1, password= 2, NAS-IP Address=4, NAS-Port=5

• Question 194:

  Which EAP method uses a modified version of the MS-CHAP authentication protocol?

  A. EAP-POTP
  B. EAP-TLS
  C. LEAP
  D. EAP-MD5
  C. LEAP

• Question 195:

  Which functionality does the Cisco ISE self-provisioning flow provide?

  A. It provides support for native supplicants, allowing users to connect devices directly to the network.
  B. It provides the My Devices portal, allowing users to add devices to the network.
  C. It provides support for users to install the Cisco NAC agent on enterprise devices.
  D. It provides self-registration functionality to allow guest users to access the network.
  A. It provides support for native supplicants, allowing users to connect devices directly to the network.

• Question 196:

  Which feature enables the Cisco ISE DHCP profiling capabilities to determine and enforce authorization policies on mobile devices?

  A. disabling the DHCP proxy option
  B. DHCP option 42
  C. DHCP snooping
  D. DHCP spoofing
  A. disabling the DHCP proxy option

• Question 197:

  What is the result of configuring the command dotlx system-auth-control on a Cisco Catalyst switch?

  A. enables the switch to operate as the 802.1X supplicant
  B. globally enables 802.1X on the switch
  C. globally enables 802.1X and defines ports as 802.1X-capable
  D. places the configuration sub-mode into dotix-auth mode, in which you can identify the authentication server parameters
  B. globally enables 802.1X on the switch

• Question 198:

  Refer to the exhibit. If the host sends a packet across the Cisco TrustSec domain, where is the SGACL enforced?

  

  A. At the egress router
  B. Dynamically at the host
  C. After the packet enters the Cisco TrustSec domain
  D. At the ingress router.
  A. At the egress router

• Question 199:

  Which three options can be pushed from a Cisco ISE server as part of a successful 802.1X authentication? (Choose three.)

  A. Posture status
  B. Reauthentication timer
  C. Authentication priority
  D. DACL
  E. VLAN
  F. Authentication order
  B. Reauthentication timer
  D. DACL
  E. VLAN

• Question 200:

  Which probe can define a shared secret for authentication?

  A. RADIUS probe
  B. SNMP Trap probe
  C. DHCP probe
  D. HTTP SPAN probe
  A. RADIUS probe