Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 381:

  What steps must you perform to deploy a CA-signed identity certificate on an ISE device?

  A. 1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CA request. 4. Install the issued certificate on the ISE.
  B. 1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the CA server.
  C. 1. Generate a signing request and save it as a file. 2. Download the CA server certificate and install it on ISE. 3. Access the ISE server and submit the CA request. 4.Install the issued certificate on the CA server.
  D. 1. Generate a signing request and save it as a file. 2. Download the CA server certificate and install it on ISE. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the ISE.
  A. 1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CA request. 4. Install the issued certificate on the ISE.

• Question 382:

  In an 802.1X environment, which feature allows for non-802.1X-supported devices such as printers and fax machines to authenticate?

  A. multiauth
  B. WebAuth
  C. MAB
  D. 802.1X guest VLAN
  C. MAB

• Question 383:

  Which condition triggers wireless authentication?

  A. NAS-Port-Type is set to IEEE 802.11.
  B. Framed-Compression is set to None.
  C. Service-Type is set to Framed.
  D. Tunnel-Type is set to VLAN.
  A. NAS-Port-Type is set to IEEE 802.11.

• Question 384:

  Which option is one method for transporting security group tags throughout the network?

  A. by embedding the SGT in the IP header
  B. via Security Group Exchange Protocol
  C. by embedding the SGT in the 802.1Q header
  D. by enabling 802.1AE on every network device
  B. via Security Group Exchange Protocol

• Question 385:

  Which option is the correct format of username in MAB authentication?

  A. host/LSB67.cisco.com
  B. [email protected]
  C. 10:41:7F:46:9F:89
  D. CISCO\chris
  C. 10:41:7F:46:9F:89

• Question 386:

  A security engineer is deploying Cisco ISE. Which feature must the engineer enable within the general node settings to enable guest services?

  A. profiling services
  B. session services
  C. monitoring services
  D. pxGrid services
  B. session services

• Question 387:

  A network administrator must enable which protocol extension to utilize EAP-Chaining?

  A. EAP-FAST
  B. EAP-TLS
  C. MSCHAPv2
  D. PEAP
  A. EAP-FAST

• Question 388:

  Which advantage is provided by using Active Directory as an external identity source?

  A. It supports SAML for single sign-on.
  B. It uses EAP chaining with EAP-FAST to authenticate users and computers.
  C. It supports two factor-authentication using a PIN and a token.
  D. It uses EAP chaining with EAP-TLS to authentication users and computers.
  A. It supports SAML for single sign-on.

• Question 389:

  What attribute could be obtained from the SNMP query probe?

  A. FQDN
  B. CDP
  C. DHCP class identifier
  D. User agent
  B. CDP

• Question 390:

  Which command is useful when troubleshooting AAA Authentication between a Cisco router and the AAA server?

  A. test aaa-server test cisco cisco123 all new-code
  B. test aaa group7 tacacs+ auth cisco123 new-code
  C. test aaa group tacacs+ cisco cisco123 new-code
  D. test aaa-server tacacs+ group7 cisco cisco123 new-code
  C. test aaa group tacacs+ cisco cisco123 new-code