Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 241:

  Which command would be used in order to maintain a single open connection between a network access device and a tacacs server?

  A. tacacs-server host timeout
  B. tacacs-server host single-connection
  C. tacacs-server host
  D. tacacs-server host single-connection
  D. tacacs-server host single-connection

• Question 242:

  You are finding that the 802.1X-configured ports are going into the error-disable state. Which command will show you the reason why the port is in the error-disable state, and which command will automatically be re-enabled after a specific amount of time? (Choose two.)

  A. show error-disable status
  B. show error-disable recovery
  C. show error-disable flap-status
  D. error-disable recovery cause security-violation
  E. error-disable recovery cause dot1x
  F. error-disable recovery cause l2ptguard
  B. show error-disable recovery
  D. error-disable recovery cause security-violation

• Question 243:

  What endpoint operating system provides native support for the SPW?

  A. Apple iOS
  B. Android OS
  C. Windows 8
  D. Mac OS X
  A. Apple iOS

• Question 244:

  Which description of SXP is true?

  A. applies SGT along every hop in the network path
  B. propagates SGT on a device upon which SGT inline tagging is unsupported
  C. removes SGT from every in the network path
  D. propagates SGT on a device which inline tagging is supported
  B. propagates SGT on a device upon which SGT inline tagging is unsupported

• Question 245:

  Which command on the switch ensures that the Service-Type attribute is sent with all RADIUS authentication request?

  A. radius-server attribute 8 include-in-access-req
  B. radius-server attribute 25 access-request include
  C. radius-server attribute 6 on-for-login-auth
  D. radius-server attribute 31 send nas-port-detail
  C. radius-server attribute 6 on-for-login-auth

• Question 246:

  When performing NAT, which of these is a limitation you need to account for?

  A. exhaustion of port number translations
  B. embedded IP addresses
  C. security payload identifiers
  D. inability to provide mutual connectivity to networks with overlapping address spaces
  B. embedded IP addresses

• Question 247:

  if user want to use his corporate laptop in another network ,what is only agent can work with this environment ?

  A. windows web agent
  B. mac web agent
  C. Cisco NAC agent
  D. mac agent NAC
  C. Cisco NAC agent

• Question 248:

  Which option must be configured on the cisco ISE authentication policy for unknown MAC addresses/identities for success authentication?

  A. reject
  B. drop
  C. continue
  D. pass
  C. continue

• Question 249:

  Which certificate authority is used for identity source real time certificate validation?

  A. Microsoft CA
  B. Linux CA
  C. OCSP
  D. LDAP
  C. OCSP

• Question 250:

  Which three options can be pushed from Cisco ISE server as part of a successful 802.1x authentication. (Choose three)

  A. authentication order
  B. posture status
  C. authentication priority
  D. vlan
  E. DACL
  F. reauthentication timer
  D. vlan
  E. DACL
  F. reauthentication timer