Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 321:

  An engineer must ensure that all client operating systems have the AnyConnect Agent for an upcoming posture implementation. Which two versions of OS does the AnyConnect posture agent support? (Choose two.)

  A. Google Android
  B. Ubuntu
  C. Apple Mac OS X
  D. Microsoft Windows
  E. Red Hat Enterprise Linux
  C. Apple Mac OS X
  D. Microsoft Windows

• Question 322:

  Cisco ISE distributed deployments support which three features? (Choose three.)

  A. global implementation of the profiler service CoA
  B. global implementation of the profiler service in Cisco ISE C. configuration to send system logs to the appropriate profiler node
  D. node-specific probe configuration
  E. server-specific probe configuration
  F. NetFlow probes
  A. global implementation of the profiler service CoA
  D. node-specific probe configuration

• Question 323:

  What is the effect of the ip http secure-server command on a Cisco ISE?

  A. It enables the HTTP server for users to connect on the command line.
  B. It enables the HTTP server for users to connect using Web-based authentication.
  C. It enables the HTTPS server for users to connect using Web-based authentication.
  D. It enables the HTTPS server for users to connect on the command line.
  C. It enables the HTTPS server for users to connect using Web-based authentication.

• Question 324:

  DRAG DROP

  A security engineer is deploying Cisco ISE for a company's guest user services. Drag and drop the Cisco ISE persona on the left onto its function on the right.

  Select and Place:

  

  

• Question 325:

  If the user in non-compliant state and want to Get out of quarantine ?

  A. download posture
  B. download profiling
  C. download mab
  D. download web agent
  A. download posture

• Question 326:

  Which Cisco ISE feature can differentiate a corporate endpoint from a personal device?

  A. EAP chaining
  B. PAC files
  C. authenticated in-band provisioning
  D. machine authentication
  A. EAP chaining

• Question 327:

  Hotspot Question

  In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded. Authentication failed and etc...

  

  Which three statements are correct regarding the events with the 20 repeat count that occurred at 2014-05-07 00:22:48.748? (Choose three.)

  A. The device was successfully authenticated using MAB.
  B. The device matched the Machine_Corp authorization policy.
  C. The Print Servers authorization profile were applied.
  D. The device was profiled as a Linksys-PrintServer.
  E. The device MAC address is 00:14:BF:70:B5:FB.
  F. The device is connected to the Gi0/1 switch port and the switch IP address is 10.10.2.2.
  A. The device was successfully authenticated using MAB.
  D. The device was profiled as a Linksys-PrintServer.
  E. The device MAC address is 00:14:BF:70:B5:FB.

• Question 328:

  Which configuration must you perform on a switch to deploy Cisco ISE in low-impact mode?

  A. Configure an ingress port ACL on the switchport.
  B. Configure DHCP snooping globally.
  C. Configure IP-device tracking.
  D. Configure BPDU filtering.
  A. Configure an ingress port ACL on the switchport.

• Question 329:

  Departments within the same company want to be able to create temporary accounts for visitors. Which type of ISE account must be created to allow each department to create temporary accounts?

  A. guest
  B. sponsor
  C. admin
  D. contractor
  B. sponsor

• Question 330:

  Which protocol sends authentication and accounting in different requests?

  A. RADIUS
  B. TACACS+
  C. EAP-Chaining D. PEAP
  E. EAP-TLS
  B. TACACS+