Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 231:

  A customer has implemented a BYOD policy to allow employees to use personal devices on the corporate network. Which two methods can an employee use to add their devices to the network*? (Choose two.)

  A. Client Information Signaling
  B. My Device portal
  C. Client Handshake Authentication
  D. Helpdesk registration
  E. native supplicants
  B. My Device portal
  E. native supplicants

• Question 232:

  When configuring a BYOD portal, which two tasks must be completed? (Choose two.)

  A. Enable policy services.
  B. Create endpoint identity groups
  C. Customize device portals
  D. Create a client provisioning portal.
  E. Create external identity sources.
  A. Enable policy services.
  B. Create endpoint identity groups

• Question 233:

  You have configured a Cisco ISE 1.2 deployment for self-registration of guest users. What two options can you select from to determine when the account duration timer begins? (Choose two.)

  A. CreateTime
  B. FirstLogin
  C. BeginLogin
  D. StartTime
  A. CreateTime
  B. FirstLogin

• Question 234:

  A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected?

  A. TACACS+
  B. RADIUS
  C. Windows Active Directory
  D. Generic LDAP
  A. TACACS+

• Question 235:

  When you configure a Cisco WLC, which task must you perform to enable central web authentication?

  A. Set the Layer 2 ACL option to None.
  B. Set the NAC State option to SNMP NAC.
  C. Set the NAC State option to RADIUS NAC.
  D. Set the NAC State option to None.
  C. Set the NAC State option to RADIUS NAC.

• Question 236:

  A user reports that a switch's RADIUS accounting packets are not being seen on the Cisco ISE server Which command is the user missing in the switch's configuration?

  A. radius-server vsa send accounting
  B. aaa accounting network default start-stop group radius
  C. aaa accounting resource default start-stop group radius
  D. aaa accounting exec default start-stop group radius
  A. radius-server vsa send accounting

• Question 237:

  What are the initial steps must you perform to add the ISE to the WLC?

  A. 1. With a Web browser, establish an HTTP connection to the WLC pod. 2, Navigate to Administration > Authentication > New. 3. Enter server values to begin the configuration.
  B. 1. With a Web browser, establish an FTP connection to the WLC pod. 2. Navigate to Security > Administration > New. 3. Add additional security features for FTP authentication.
  C. 1. With a Web browser, establish an HTTP connection to the WLC pod. 2. Navigate to Authentication > New. 3. Enter ACLs and Authentication methods to begin the configuration.
  D. 1. With a Web browser connect, establish an HTTPS connection to the WLC pod. 2. Navigate to Security > Authentication > New. 3. Enter server values to begin the configuration.
  D. 1. With a Web browser connect, establish an HTTPS connection to the WLC pod. 2. Navigate to Security > Authentication > New. 3. Enter server values to begin the configuration.

• Question 238:

  Which option describes the purpose of configuring Native Supplicant Profile on the Cisco ISE?

  A. It helps employees add and manage new devices by entering the MAC address for the device.
  B. It is used to register personal devices on the network.
  C. It enforces the use of MSCHAPv2 or EAP-TLS for 802.1X authentication.
  D. It provides posture assessments and remediation for devices that are attempting to gain access to the corporate network.
  C. It enforces the use of MSCHAPv2 or EAP-TLS for 802.1X authentication.

• Question 239:

  Which two are best practices to implement profiling services in a distributed environment? (Choose two)

  A. use of device sensor feature
  B. configuration to send syslogs to the appropriate profiler node
  C. netflow probes enabled on central nodes
  D. node-specific probe configuration
  E. global enablement of the profiler service
  B. configuration to send syslogs to the appropriate profiler node
  D. node-specific probe configuration

• Question 240:

  What are two methods of enforcement with SGTs?

  A. SG-ACLs on switches.
  B. SG-ACLs on routers.
  C. SG-Firewalls.
  D. SG-Appliances.
  E. SGTs are not enforced.
  A. SG-ACLs on switches.
  C. SG-Firewalls.