Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 311:

  Which state is a Cisco IOS IPS signature in if it does not take an appropriate associated action even if it has been successfully compiled?

  A. retired
  B. disabled
  C. unsupported
  D. inactive
  B. disabled

• Question 312:

  What are three portals provided by PSN?

  A. Monitor
  B. Admin
  C. Tshoot
  D. My device
  E. Sponsor
  F. Guest
  D. My device
  E. Sponsor
  F. Guest

• Question 313:

  What are the two values Cisco recommends that you configure and test when deploying MAB 802.1x?

  A. supp-timeout
  B. server-timeout
  C. max-req
  D. max-reauth-req
  E. tx-period
  B. server-timeout
  D. max-reauth-req

• Question 314:

  Which default identity source is used by the MyDevices_Portal_Sequence identity source sequence?

  A. internal users
  B. guest users
  C. Active Directory
  D. internal endpoints
  E. RADIUS servers
  A. internal users

• Question 315:

  Which two components are required to connect to a WLAN network that is secured by EAP-TLS authentication? (Choose two.)

  A. Kerberos authentication server
  B. AAA/RADIUS server
  C. PSKs
  D. CA server
  B. AAA/RADIUS server
  D. CA server

• Question 316:

  Which statement best describes inside policy based NAT?

  A. Policy NAT rules are those that determine which addresses need to be translated per the enterprise security policy
  B. Policy NAT consists of policy rules based on outside sources attempting to communicate with inside endpoints.
  C. These rules use source addresses as the decision for translation policies.
  D. These rules are sensitive to all communicating endpoints.
  A. Policy NAT rules are those that determine which addresses need to be translated per the enterprise security policy

• Question 317:

  Which two accounting types are used to implement accounting with RADIUS? (Choose two.)

  A. Network
  B. User
  C. Attribute
  D. Device
  E. Resource
  A. Network
  E. Resource

• Question 318:

  Which option is a recommended agent for guest posture assessment?

  A. Windows Web Agent
  B. Mac OSX Agent
  C. Mac OSX Web Agent
  D. Windows NAC Agent
  A. Windows Web Agent

• Question 319:

  Hotspot Question

  In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded. Authentication failed and etc...

  

  

  Which two statements are correct regarding the event that occurred at 2014-05-07 00:16:55.393? (Choose two.)

  A. The failure reason was user entered the wrong username.
  B. The supplicant used the PAP authentication method.
  C. The username entered was it1.
  D. The user was authenticated against the Active Directory then also against the ISE interal user database and both fails.
  E. The NAS switch port where the user connected to has a MAC address of 44:03:A7:62:41:7F
  F. The user is being authenticated using 802.1X.
  G. The user failed the MAB.
  H. The supplicant stopped responding to ISE which caused the failure.
  C. The username entered was it1.
  F. The user is being authenticated using 802.1X.

• Question 320:

  Under which circumstance would an inline posture node be deployed?

  A. When the NAD does not support CoA
  B. When the NAD cannot support the number of connected endpoints
  C. When a PSN is overloaded
  D. To provide redundancy for a PSN
  A. When the NAD does not support CoA