Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 211:

  A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and an employee SSID is used for company network access. Which controller option must be enabled to allow a user to switch immediately from the provisioning SSID to the employee SSID after registration has been completed?

  A. AAA override
  B. User Idle Timeout
  C. Fast SSID Change
  D. AP Fallback
  C. Fast SSID Change

• Question 212:

  Which attribute is needed for Cisco ISE to profile a device with HTTP probe?

  A. user-agent
  B. OUI
  C. host-name
  D. cdp-cache-platform
  E. dhcp-class-identifier
  F. sysDescr
  A. user-agent

• Question 213:

  Which method does Cisco prefer to securely deploy guest wireless access in a BYOD implementation?

  A. deploying a dedicated Wireless LAN Controller in a DMZ
  B. configuring a guest SSID with WPA2 Enterprise authentication
  C. configuring guest wireless users to obtain DHCP centrally from the corporate DHCP server
  D. disabling guest SSID broadcasting
  A. deploying a dedicated Wireless LAN Controller in a DMZ

• Question 214:

  When you configure an endpoint profiling policy rule, which option describes the purpose of the minimum certainty factor?

  A. It is compared to the total certainty metric of an individual endpoint to determine whether the endpoint can be trusted.
  B. It is compared to the assigned certainty value of an individual endpoint in a device database to determine whether the endpoint can be trusted.
  C. It is used to compare the policy condition to other active policies.
  D. It is used to determine the likelihood that an endpoint is an active, trusted device on the network.
  A. It is compared to the total certainty metric of an individual endpoint to determine whether the endpoint can be trusted.

• Question 215:

  A customer is concerned with the use of the issued laptops even when devices are not on the corporate network. Which agent continues to be operational even when the host is not on the Cisco ISE network?

  A. Cisco ISE Agent
  B. Cisco NAC Agent
  C. Cisco Custom Agent
  D. Cisco NAC Web Agent
  B. Cisco NAC Agent

• Question 216:

  Which action do you take to define the global authorization exception policy by using a Device Admin Policy Set?

  A. Configure the policy by using Proxy Sequence mode.
  B. Configure a rule-based condition in a policy set.
  C. Define the policy for each group of devices.
  D. Define the policy by configuring a standard profile
  B. Configure a rule-based condition in a policy set.

• Question 217:

  

  Refer to the exhibit. What is sent as result of running the commands?

  A. default accounting information every 30 minutes
  B. interim accounting updates only when at least 30 new client attributes are buffered
  C. accounting information after every 30 client sessions
  D. interim accounting updates that contain new client information every 30 minutes
  D. interim accounting updates that contain new client information every 30 minutes

• Question 218:

  Which of these allows you to add event actions globally based on the risk rating of each event, without having to configure each signature individually?

  A. event action summarization
  B. event action filter
  C. event action override
  D. signature event action processor
  C. event action override

• Question 219:

  Which command enables static PAT for TCP port 25?

  A. nat (outside,inside) static 209.165.201.3 209.165.201.226 eq smtp
  B. nat static 209.165.201.3 eq smtp
  C. nat (inside,outside) static 209.165.201.3 service tcp smtp smtp
  D. static (inside,outside) 209.165.201.3 209.165.201.226 netmask 255.255.255.255
  C. nat (inside,outside) static 209.165.201.3 service tcp smtp smtp

• Question 220:

  Which mechanism does Cisco ISE use to force a device off the network if it is reported lost or stolen?

  A. CoA
  B. dynamic ACLs
  C. SGACL
  D. certificate revocation
  A. CoA