Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 271:

  Which two additional fields are added to an Ethernet frame when implementing MACsec? (Choose two.)

  A. encapsulating security payload
  B. authentication header
  C. message authentication code
  D. authentication host mode
  E. security tag
  C. message authentication code
  E. security tag

• Question 272:

  Which client interface or interfaces are provisioned when the Cisco ISE performs supplicant provisioning?

  A. wireless and wired interface
  B. wireless interface
  C. active interfaces
  D. wired interface
  A. wireless and wired interface

• Question 273:

  Which 802.1x command is needed for ACL to be applied on a switch port?

  A. dot1x system-auth-control
  B. dot1x pae authenticator
  C. authentication port-control auto
  D. radius-server vsa send authentication
  E. aaa authorization network default group radius
  D. radius-server vsa send authentication

• Question 274:

  In a split ACS deployment with primary and secondary servers, which three statements about AAA load handling are true? (Choose three.)

  A. During normal operations, each server processes the full workload of both servers.
  B. If a AAA connectivity problem occurs, the servers split the full load of authentication requests.
  C. If a AAA connectivity problem occurs, each server processes the full workload of both servers.
  D. During normal operations, the servers split the full load of authentication requests.
  E. During normal operations, each server is used for specific operations, such as device administration and network admission.
  F. The primary servers are used to distribute policy information to other servers in the enterprise.
  C. If a AAA connectivity problem occurs, each server processes the full workload of both servers.
  D. During normal operations, the servers split the full load of authentication requests.
  E. During normal operations, each server is used for specific operations, such as device administration and network admission.

• Question 275:

  Which radius attribute can be used to dynamically assign the inactivity active timer for MAB users from the Cisco ISE node?

  A. radius-server timeout
  B. idle-timeout attribute
  C. termination-action attribute
  D. session-timeout attribute
  B. idle-timeout attribute

• Question 276:

  Endpoint access methods?

  A. MAB and WEB
  B. DHCP
  C. Posture
  D. Profiling
  A. MAB and WEB

• Question 277:

  A network engineer is configuring HTTP based CWA on a switch. Which three configuration elements are required? (Choose three.)

  A. HTTP server enabled
  B. Radius authentication on the port with MAB
  C. Redirect access-list
  D. Redirect-URL
  E. HTTP secure server enabled
  F. Radius authentication on the port with 802.1x
  G. Pre-auth port based access-list
  A. HTTP server enabled
  B. Radius authentication on the port with MAB
  C. Redirect access-list

• Question 278:

  Which advanced option within a WLAN must be enabled to trigger central web authentication for wireless users?

  A. AAA override
  B. Static IP tunnelling
  C. Diagnostic channel
  D. DHCP server
  A. AAA override

• Question 279:

  DRAG DROP

  Drag and drop the posture remediation actions from the left onto the correct descriptions on the right.

  Select and Place:

  

  

  ---

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_new_chapter_011110.html#reference_F304C79D82674621A0CBAEBED45066D9

• Question 280:

  In an 802.1X environment, which feature allows for non-802.1X-supported devices such as printers and fax machines to authenticate?

  A. multiauth
  B. WebAuth
  C. MAB
  D. 802.1X guest VLAN
  C. MAB