Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 371:

  Which two options are valid for configuring IEEE 802.1AE MACSec between switches in a TrustSec network? (Choose two.)

  A. manually on links between supported switches
  B. in the Cisco Identity Services Engine
  C. in the global configuration of a TrustSec non-seed switch
  D. dynamically on links between supported switches
  E. in the Cisco Secure Access Control System
  F. in the global configuration of a TrustSec seed switch
  A. manually on links between supported switches
  D. dynamically on links between supported switches

• Question 372:

  Within a BYOD environment, when employees add devices using the My Devices portal, which category they are assigned to?

  A. Employee
  B. Profiled
  C. Registered
  D. Guest
  C. Registered

• Question 373:

  Which OS has Anyconnect posture support?

  A. Windows
  B. Mac OS
  C. Linux
  A. Windows
  B. Mac OS

• Question 374:

  Refer to the exhibit. The links outside the TrustSec area in the given SGA architecture are unprotected. On which two links does EAC take place? (Choose two.)

  

  A. between switch 2 and switch 3
  B. between switch 5 and host 2
  C. between host 1 and switch 1
  D. between the authentication server and switch 4
  E. between switch 1 and switch 2
  F. between switch 1 and switch 5
  B. between switch 5 and host 2
  D. between the authentication server and switch 4

• Question 375:

  A client is quarantined during a Cisco ISE posture assessment. After which two events can the client undergo a posture reassessment? (Choose two.)

  A. when the network transition delay timer expires
  B. when the supplicant is reconfigured
  C. when the reauthentication timer for the authorization profile is triggered
  D. when the wired client disconnects and reconnects to the network
  E. when the client reinstalls the posture agent
  D. when the wired client disconnects and reconnects to the network
  E. when the client reinstalls the posture agent

• Question 376:

  Which two values are compared by the binary comparison function in authentication that is based on Active Directory?

  A. subject alternative name and the common name
  B. user-presented password hash and a hash stored in Active Directory
  C. user-presented certificate and a certificate stored in Active Directory
  D. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory
  A. subject alternative name and the common name
  D. MS-CHAPv2 provided machine credentials and credentials stored in Active Directory

• Question 377:

  Which network component would issue the CoA?

  A. switch
  B. endpoint
  C. Admin Node
  D. Policy Service Node
  D. Policy Service Node

• Question 378:

  Which Catalyst Switch command is required to enable accounting for network access?

  A. aaa accounting command dot1x
  B. aaa accounting network default group radius
  C. aaa accounting radius-server send accounting
  D. aaa accounting dot1x default start-stop group radius
  D. aaa accounting dot1x default start-stop group radius

• Question 379:

  Which type of SGT propagation does a WLC in a datacenter require?

  A. SXP
  B. SGT
  C. SGT inline
  D. SGT Reflector
  A. SXP

• Question 380:

  A network administration wants to set up a posture condition on Cisco ISE to check for the file name Posture.txt in C:\ on a Windows machine. Which condition must the network administrator configuration?

  A. Service condition
  B. Registry condition
  C. Application condition
  D. File condition
  D. File condition