Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 351:

  Which port does cisco ISE use for native supplicant provisioning of a windows computer?

  A. TCP/UDP 8905
  B. TCP 8443
  C. TCP/UDP 8909
  D. TCP 443
  C. TCP/UDP 8909

• Question 352:

  Which effect does the ip http secure-server command have on a Cisco ISE?

  A. It enables the HTTP server for users to connect on the command line.
  B. It enables the HTTP server for users to connect by using web-based authentication.
  C. It enables the HTTPS server for users to connect by using web-based authentication.
  D. It enables the HTTPS server for users to connect on the command line.
  C. It enables the HTTPS server for users to connect by using web-based authentication.

• Question 353:

  An engineer wants do allow dynamic vlan assignment from ISE. What must be configured on the switch?

  A. DTP
  B. VTP
  C. AAA authentication
  D. AAA authorization
  C. AAA authentication

• Question 354:

  In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose three.)

  A. configuration
  B. authentication
  C. sensing
  D. policy requirements
  E. monitoring
  F. repudiation
  A. configuration
  B. authentication
  D. policy requirements

• Question 355:

  Which two statements about TrustSec in Closed Mode are true? (Choose two.)

  A. The wired port is in the shutdown state.
  B. All user traffic is blocked until authentication is complete.
  C. Only DNS and DHCP traffic are permitted until authentication is complete.
  D. Only EAPoL traffic is permitted until authentication is complete.
  E. It requires EAP-TLS.
  D. Only EAPoL traffic is permitted until authentication is complete.
  E. It requires EAP-TLS.

• Question 356:

  Which two authentication stores are supported to design a wireless network using PEAP EAP- MSCHAPv2 as the authentication method? (Choose two.)

  A. Microsoft Active Directory
  B. ACS
  C. LDAP
  D. RSA Secure-ID
  E. Certificate Server
  A. Microsoft Active Directory
  B. ACS

• Question 357:

  Which type of access list is the most scalable that Cisco ISE can use to implement network authorization enforcement for a large number of users?

  A. downloadable access lists
  B. named access lists
  C. VLAN access lists
  D. MAC address access lists
  A. downloadable access lists

• Question 358:

  Which command used to enable SGACL globallly on a router interface?

  A. cts role-based-basic
  B. cts role-based-enable
  C. cts role-based-enforcement
  D. cts role-based monitor permissions from { sgt_num } to { dgt_num }][ ipv4 | ipv6 ]
  C. cts role-based-enforcement

• Question 359:

  Which term describes a software application that seeks connectivity to the network via a network access device?

  A. authenticator
  B. server
  C. supplicant
  D. WLC
  C. supplicant

• Question 360:

  When RADIUS NAC and AAA Override are enabled for a WLC on a Cisco ISE, which two statements about RADIUS NAC are true? (Choose two.)

  A. It returns an access-accept and sends the redirection URL for all users.
  B. It establishes secure connectivity between the RADIUS server and the Cisco ISE.
  C. It allows the Cisco ISE to send a CoA request that indicates when the user is authenticated.
  D. It is used for posture assessment, so the Cisco ISE changes the user profile based on posture result.
  E. It allows multiple users to authenticate at the same time.
  C. It allows the Cisco ISE to send a CoA request that indicates when the user is authenticated.
  D. It is used for posture assessment, so the Cisco ISE changes the user profile based on posture result.