Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 421:

  Which two EAP types require server side certificates? (Choose two.)

  A. EAP-TLS
  B. EAP-PEAP
  C. EAP-MD5
  D. LEAP
  E. EAP-FAST
  F. MSCHAPv2
  A. EAP-TLS
  B. EAP-PEAP

• Question 422:

  You are configuring SGA on a network device that is unable to perform SGT tagging. How can the device propagate SGT information?

  A. The device can use SXP to pass IP-address-to-SGT mappings to a TrustSec-capable hardware peer.
  B. The device can use SXP to pass MAC-address-to-STG mappings to a TrustSec-capable hardware peer.
  C. The device can use SXP to pass MAC-address-to-IP mappings to a TrustSec-capable hardware peer.
  D. The device can propagate SGT information in an encapsulated security payload.
  E. The device can use a GRE tunnel to pass the SGT information to a TrustSec-capable hardware peer.
  A. The device can use SXP to pass IP-address-to-SGT mappings to a TrustSec-capable hardware peer.

• Question 423:

  An ISE1.3 environment, which path does a network engineer use to set up a self-registered guest portal?

  A. Guest Access > Configure > Guest Portals
  B. Security > Access Control Lists > Guest Portals
  C. Policy > Settings > Guest Portals
  D. Policy > Authorization > Guest Portals
  A. Guest Access > Configure > Guest Portals

• Question 424:

  An engineer of Company A wants to know what kind of devices are connecting to the network. Which service can be enabled on the Cisco ISE node?

  A. central web authentication
  B. posture
  C. MAB
  D. profiling
  D. profiling

• Question 425:

  Refer to the exhibit. If the user matches the given TACACS+ profile on Cisco ISE, which command can the user enter from shell prompt on a Cisco switch?

  

  A. enable
  B. enable 10
  C. show run
  D. configure terminal
  B. enable 10

• Question 426:

  Which three of these are features of data plane security on a Cisco ISR? (Choose three)

  A. Routing protocol filtering
  B. FPM
  C. uRPF
  D. RBAC
  E. CPPr
  F. Netflow export
  B. FPM
  C. uRPF
  F. Netflow export

• Question 427:

  Which of these allows you to add event actions globally based on the risk rating of each event, without having to configure each signature individually?

  A. event action summarization
  B. event action filter
  C. event action override
  D. signature event action processor
  C. event action override

• Question 428:

  Which type of a sensor requires an embedded data collector in the switch to support profiling?

  A. DHCP sensor
  B. CDP sensor
  C. IOS sensor
  D. LLDP sensor
  A. DHCP sensor

• Question 429:

  Refer to the exhibit. Which three statements about the given configuration are true? (Choose three.)

  

  A. TACACS+ authentication configuration is complete.
  B. TACACS+ authentication configuration is incomplete.
  C. TACACS+ server hosts are configured correctly.
  D. TACACS+ server hosts are misconfigured.
  E. The TACACS+ server key is encrypted.
  F. The TACACS+ server key is unencrypted.
  B. TACACS+ authentication configuration is incomplete.
  C. TACACS+ server hosts are configured correctly.
  F. The TACACS+ server key is unencrypted.

• Question 430:

  Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?

  A. RADIUS Attribute (5) NAS-Port
  B. RADIUS Attribute (6) Service-Type
  C. RADIUS Attribute (7) Framed-Protocol
  D. RADIUS Attribute (61) NAS-Port-Type
  B. RADIUS Attribute (6) Service-Type