Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 331:

  Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode?

  A. Granular ACLs applied prior to authentication
  B. Per user dACLs applied after successful authentication
  C. Only EAPoL traffic allowed prior to authentication
  D. Adjustable 802.1X timers to enable successful authentication
  C. Only EAPoL traffic allowed prior to authentication

• Question 332:

  Which three algorithms should be avoided due to security concerns? (Choose three.)

  A. DES for encryption
  B. SHA-1 for hashing
  C. 1024-bit RSA
  D. AES GCM mode for encryption
  E. HMAC-SHA-1
  F. 256-bit Elliptic Curve Diffie-Hellman
  G. 2048-bit Diffie-Hellman
  A. DES for encryption
  B. SHA-1 for hashing
  C. 1024-bit RSA

• Question 333:

  Which statement about system time and NTP server configuration with Cisco ISE is true?

  A. The system time and NTP server settings can be configured centrally on the Cisco ISE.
  B. The system time can be configured centrally on the Cisco ISE, but NTP server settings must be configured individually on each ISE node.
  C. NTP server settings can be configured centrally on the Cisco ISE, but the system time must be configured individually on each ISE node.
  D. The system time and NTP server settings must be configured individually on each ISE node.
  D. The system time and NTP server settings must be configured individually on each ISE node.

• Question 334:

  After you connected unmanaged switch to the port dot1x failed,what is the problem?

  A. missing command "mab"
  B. there is no Bpdu in the port
  C. eapol packet not erceived in the port
  D. missing command "authentication host-mode multi-host"
  E. missing command "authentication host-mode multi-auth
  E. missing command "authentication host-mode multi-auth

• Question 335:

  Which profiling probe collects the user-agent string?

  A. NetFlow
  B. DHCP
  C. Network Scan
  D. HTTP
  D. HTTP

• Question 336:

  Which certificate authority is used for identity source real time certificate validation?

  A. OCSP
  A. OCSP

• Question 337:

  What are two actions that can occur when an 802.1X-enabled port enters violation mode? (Choose two.)

  A. The port is error disabled.
  B. The port drops packets from any new device that sends traffic to the port.
  C. The port generates a port resistance error.
  D. The port attempts to repair the violation.
  E. The port is placed in quarantine state.
  F. The port is prevented from authenticating indefinitely.
  A. The port is error disabled.
  B. The port drops packets from any new device that sends traffic to the port.

• Question 338:

  Which command used to enable SGACL globally?

  A. cts role-based-enforcement
  A. cts role-based-enforcement

• Question 339:

  Which command configures console port authorization under line con 0?

  A. authorization default|WORD
  B. authorization exec line con 0|WORD
  C. authorization line con 0|WORD
  D. authorization exec default|WORD
  D. authorization exec default|WORD

• Question 340:

  With which two appliance-based products can Cisco Prime Infrastructure integrate to perform centralized management? (Choose two.)

  A. Cisco Managed Services Engine
  B. Cisco Email Security Appliance
  C. Cisco Wireless Location Appliance
  D. Cisco Content Security Appliance
  E. Cisco ISE
  A. Cisco Managed Services Engine
  E. Cisco ISE