Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 301:

  Which description of the purpose of the Continue option in an authentication policy rule is true?

  A. It allows Cisco ISE to check the list of rules in an authentication policy until there is a match.
  B. It sends an authentication to the next subrule within the same authentication rule.
  C. It allows Cisco ISE to proceed to the authorization policy regardless of authentication pass/fail.
  D. It sends an authentication to the selected identity store.
  E. It causes Cisco ISE to ignore the NAD because NAD will treat the Cisco ISE server as dead.
  C. It allows Cisco ISE to proceed to the authorization policy regardless of authentication pass/fail.

• Question 302:

  Which three pieces of information can be found in an authentication detail report? (Choose three.)

  A. DHCP vendor ID
  B. user agent string
  C. the authorization rule matched by the endpoint
  D. the EAP method the endpoint is using
  E. the RADIUS username being used
  F. failed posture requirement
  C. the authorization rule matched by the endpoint
  D. the EAP method the endpoint is using
  E. the RADIUS username being used

• Question 303:

  An engineer wants to migrate 802.1x deployment phase from Open to low impact mode. Which options she select?

  A. Ingress access list applied to the interface
  B. Authentication host mode to multiple domain
  C. Open authentication to the domain
  D. Authentication host mode to multiple authentication
  A. Ingress access list applied to the interface

• Question 304:

  Which redirect-URL is pushed by Cisco ISE for posture redirect for corporate users?

  A. https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CCandpo rtal=283258a0-e96e-11e4-a30a005056bf01c9andaction=cppandtoken=a1a6ea71ea8f410c2637e11ba534379e
  B. https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CCandpo rtal=283258a0-e96e-11e4-a30a005056bf01c9andaction=cwaandtoken=a1a6ea71ea8f410c2637e11ba534379e
  C. https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CCandpo rtal=283258a0-e96e-11e4-a30a005056bf01c9andaction=mdmandtoken=a1a6ea71ea8f410c2637e11ba534379e
  D. https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CCandpo rtal=283258a0-e96e-11e4-a30a005056bf01c9andaction=drwandtoken=a1a6ea71ea8f410c2637e11ba534379e
  A. https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CCandpo rtal=283258a0-e96e-11e4-a30a005056bf01c9andaction=cppandtoken=a1a6ea71ea8f410c2637e11ba534379e

• Question 305:

  Why does Cisco recommend assigning dynamic classification security group tag assignment at the access layer?

  A. Static security group assignments are more scalable.
  B. Security group assignment occurs as users enter the network.
  C. To use SXP to transport STG to IP mappings.
  D. Security group assignment occurs as users leave the network.
  B. Security group assignment occurs as users enter the network.

• Question 306:

  A security administrator must design posture remediation services for a company's Macintosh user base running posture agent. Which Cisco ISE remediation option can the engineer utilize to accomplish this task?

  A. file remediation
  B. WSUS remediation
  C. launch program remediation
  D. AV remediation
  D. AV remediation

• Question 307:

  Which two services are included in the Cisco ISE posture service? (Choose two.)

  A. posture administration
  B. posture run-time
  C. posture monitoring
  D. posture policing
  E. posture catalog
  A. posture administration
  B. posture run-time

• Question 308:

  What is another term for 802.11i wireless network security?

  A. 802.1x
  B. WEP
  C. TKIP
  D. WPA
  E. WPA2
  E. WPA2

• Question 309:

  In a multi-node ISE deployment, backups are not working on the MnT node. Which ISE CLI option would help mitigate this issue?

  A. repository
  B. ftp-url
  C. application-bundle
  D. collector
  A. repository

• Question 310:

  Which advantage does standalone MAB provide?

  A. It enables the administrator to configure MAB to occur before 802.1x authentication is attempted.
  B. It can grant access to devices based on their MAC addresses without requiring 802.1x support.
  C. It implicitly grants access when the RADIUS server is offline.
  D. It can grant access to devices based on their IP addresses without requiring 802.1x support.
  B. It can grant access to devices based on their MAC addresses without requiring 802.1x support.