Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 401:

  Which two protocols are supported with the Cisco IOS Device Sensor? (Choose two.)

  A. SNMP
  B. Cisco Discovery Protocol
  C. RADIUS
  D. LLDP
  E. NetFlow
  B. Cisco Discovery Protocol
  D. LLDP

• Question 402:

  If an endpoint is marked noncompliant during that download, a CoA is sent and the device is forced to reauthenticate, providing a different result?

  A. quarantine
  B. exit
  C. default
  D. end
  A. quarantine

• Question 403:

  When performing NAT, which of these is a limitation you need to account for?

  A. exhaustion of port number translations
  B. embedded IP addresses
  C. security payload identifiers
  D. inability to provide mutual connectivity to networks with overlapping address spaces
  B. embedded IP addresses

• Question 404:

  In an ISE 1.3 environment which two remediation types are supported on the NAC agent for Macintosh1? (Choose two.)

  A. antivirus remediation (manual)
  B. link remediation (automatic)
  C. link remediation (manual)
  D. antivirus remediation (automatic)
  E. antispyware remediation (manual)
  B. link remediation (automatic)
  D. antivirus remediation (automatic)

• Question 405:

  Which statement best describes inside policy based NAT?

  A. Policy NAT rules are those that determine which addresses need to be translated per the enterprise security policy
  B. Policy NAT consists of policy rules based on outside sources attempting to communicate with inside endpoints.
  C. These rules use source addresses as the decision for translation policies.
  D. These rules are sensitive to all communicating endpoints.
  A. Policy NAT rules are those that determine which addresses need to be translated per the enterprise security policy

• Question 406:

  When RADIUS NAC and AAA Override are enabled for WLC on a Cisco ISE, which two statements about RADIUS NAC are true? (Choose two.)

  A. It will return an access-accept and send the redirection URL for all users.
  B. It establishes secure connectivity between the RADIUS server and the ISE.
  C. It allows the ISE to send a CoA request that indicates when the user is authenticated.
  D. It is used for posture assessment, so the ISE changes the user profile based on posture result.
  E. It allows multiple users to authenticate at the same time.
  C. It allows the ISE to send a CoA request that indicates when the user is authenticated.
  D. It is used for posture assessment, so the ISE changes the user profile based on posture result.

• Question 407:

  Where would a Cisco ISE administrator define a named ACL to use in an authorization policy?

  A. In the conditions of an authorization rule.
  B. In the attributes of an authorization rule.
  C. In the permissions of an authorization rule.
  D. In an authorization profile associated with an authorization rule.
  D. In an authorization profile associated with an authorization rule.

• Question 408:

  In the redirect URL authorization attribute, which Cisco ISE node acts as the web server when performing CWA?

  A. Administration
  B. Monitoring
  C. Policy Service
  D. pxGrid
  C. Policy Service

• Question 409:

  What EAP method supports mutual certificate-based authentication?

  A. EAP-TTLS
  B. EAP-MSCHAP
  C. EAP-TLS
  D. EAP-MD5
  C. EAP-TLS

• Question 410:

  What was an early precursor to MAC Authentication Bypass?

  A. port security
  B. VLAN access lists
  C. Spanning Tree
  D. VMPS
  D. VMPS