Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 391:

  When Cisco IOS IPS signatures are being tuned, how is the Target Value Rating assigned?

  A. It is calculated from the Event Risk Rating.
  B. It is calculated from a combination of the Attack Severity Rating and Signature Fidelity Rating
  C. It is manually set by the administrator.
  D. It is set based upon SEAP functions.
  C. It is manually set by the administrator.

• Question 392:

  Cisco IOS IPS uses which alerting protocol with a pull mechanism for getting IPS alerts to the network management application?

  A. HTTPS
  B. SMTP
  C. SNMP
  D. syslog
  E. SDEE
  F. POP3
  E. SDEE

• Question 393:

  A network administrator needs to determine the ability of existing network devices to deliver key BYOD services. Which tool will complete a readiness assessment and outline hardware and software capable and incapable devices?

  A. Prime Infrastructure
  B. Network Control System
  C. Cisco Security Manager
  D. Identity Services Engine
  A. Prime Infrastructure

• Question 394:

  A manager of Company A is hosting a conference. Conference participants use a code on the AUP page of the hot-spot guest portal Which code must the manager create on Cisco ISE before the meeting?

  A. user code
  B. pass code
  C. access code
  D. registration code
  D. registration code

• Question 395:

  Which WLC debug command would be used to troubleshoot authentication issues on a 802. 1X enabled WLAN?

  A. debug dot11 aaa manager all
  B. debug wps mfp Iwapp
  C. debug dot11 state
  D. debug dotlx events
  A. debug dot11 aaa manager all

• Question 396:

  Which internal Cisco ISE component reduces demand on JVM memory by limiting the number of devices the profiler handles?

  A. eventHandlerQueueStze
  B. maxEndPomtslnLocalDb
  C. NetworkDeviceEventHandter
  D. forwarderQueueSize
  B. maxEndPomtslnLocalDb

• Question 397:

  Your guest-access wireless network is experiencing degraded performance and excessive latency due to user saturation. Which type of rate limiting can you implement on your network to correct the problem?

  A. per-device
  B. per-policy
  C. per-access point
  D. per-controller
  E. per-application
  A. per-device

• Question 398:

  Which two switchport commands enable MAB and allow non-802.1X capable devices to immediately run through the MAB process? (Choose two.)

  A. authentication order mab dot1x
  B. authentication order dot1x mab
  C. no authentication timer
  D. dot1x timeout tx-period
  E. authentication open
  F. mab
  A. authentication order mab dot1x
  F. mab

• Question 399:

  When Cisco IOS IPS is configured to use SDEE for event notification, how are events managed?

  A. They are stored in the router's event store and will allow authenticated remote systems to pull events from the event store.
  B. All events are immediately sent to the remote SDEE server.
  C. Events are sent via syslog over a secure SSUTLS communications channel.
  D. When the event store reaches its maximum configured number of event notifications, the stored events are sent via SDEE to a remote authenticated server and a new event store is created.
  A. They are stored in the router's event store and will allow authenticated remote systems to pull events from the event store.

• Question 400:

  Which two Cisco Catalyst switch interface commands allow only a single voice device and a single data device to be connected to the IEEE 802.1X-enabled interface? (Choose two.)

  A. authentication host-mode single-host
  B. authentication host-mode multi-domain
  C. authentication host-mode multi-host
  D. authentication host-mode multi-auth
  A. authentication host-mode single-host
  B. authentication host-mode multi-domain