Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 411:

  Which action does the command private-vlan association 100,200 take?

  A. configures VLANs 100 and 200 and associates them as a community
  B. associates VLANs 100 and 200 with the primary VLAN
  C. creates two private VLANs with the designation of VLAN 100 and VLAN 200
  D. assigns VLANs 100 and 200 as an association of private VLANs
  B. associates VLANs 100 and 200 with the primary VLAN

• Question 412:

  Which three options can be pushed from a cisco ISE server as part of a successful 802.1x authentication? (Choose three.)

  A. reauthentication
  B. authentication
  C. VLAN
  D. posture status
  E. DACL
  A. reauthentication
  C. VLAN
  E. DACL

• Question 413:

  What is the function of the SGACL policy matrix on a Cisco TrustSec domain with SGT Assignment?

  A. It determines which access policy to apply to the endpoint.
  B. It determines which switches are trusted within the TrustSec domain.
  C. It determines the path the SGT of the packet takes when entering the Cisco TrustSec domain.
  D. It lists all servers that are permitted to participate in the TrustSec domain.
  E. It lists all hosts that are permitted to participate in the TrustSec domain.
  A. It determines which access policy to apply to the endpoint.

• Question 414:

  Drag and drop the portals from the left onto the correct portal tasks on the right.

  Select and Place:

  

  

  ---

  Certificate provisioning = Request a certificate for a device that is unable to use onboarding support Client provisioning = Provide a posture assessment for a device My Devices = Register a lost device Blacklist = Remove a device

• Question 415:

  A network administrator must remediate unpatched servers by redirecting them to their remediation portal. Which conditions in the authorization policy must the network administrator provision on Cisco ISE to accomplish this task?

  A. noncompliant
  B. quarantine
  C. compliant
  D. URL redirect
  A. noncompliant

• Question 416:

  You have configured a Cisco ISE1.2 deployment for self registration of guest users. What two options can you select from to determine when the account duration timer begins(Choose two)?

  A. Createtime
  B. Firstlogin
  C. Approvaltime
  D. Custom
  E. Starttime
  A. Createtime
  B. Firstlogin

• Question 417:

  Refer to the exitbit. Where is the sgacl applied on that network?

  

  A. ingress router
  B. egress router
  C. TrustSec domain
  D. Host
  B. egress router

• Question 418:

  You must recover a wireless client from quarantine. You disconnect the client from the network. Which action do you take next?

  A. Reboot the client machine after the idle timeout period expires.
  B. Start a manual reassessment
  C. Reconnect to the network after the idle timeout period expires.
  D. Turn off the MIC of the client
  C. Reconnect to the network after the idle timeout period expires.

• Question 419:

  Which three events immediately occur when a user clicks register on their device in a single- SSID BYOD onboarding registration process? (Choose three).

  A. CA certificate is sent to the device from Cisco ISE
  B. An endpoint is added to a Registered Devices identity group
  C. RADIUS access request is sent to Cisco ISE D. The profile service is sent to the device from Cisco ISE
  E. DACL is sent to the device from Cisco ISE
  F. BYOD registration flag is set by Cisco ISE
  A. CA certificate is sent to the device from Cisco ISE
  B. An endpoint is added to a Registered Devices identity group
  F. BYOD registration flag is set by Cisco ISE

• Question 420:

  In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?

  A. Command set
  B. Group name
  C. Method list
  D. Login type
  C. Method list