Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 431:

  What is the first step that occurs when provisioning a wired device in a BYOD scenario?

  A. The smart hub detects that the physically connected endpoint requires configuration and must use MAB to authenticate.
  B. The URL redirects to the Cisco ISE Guest Provisioning portal.
  C. Cisco ISE authenticates the user and deploys the SPW package.
  D. The device user attempts to access a network URL.
  A. The smart hub detects that the physically connected endpoint requires configuration and must use MAB to authenticate.

• Question 432:

  A network administrator found that the IP device tracking table on a switch is not getting updated when the client has a static IP address, but if the address is from DHCP, the table is getting updated. Which description of the cause of this issue is true?

  A. The switch code must be upgraded.
  B. IP device tracking is not configured properly
  C. ARP inspection is on and there is no ARP ACL for static clients
  D. IP device tracking does not work with statically assigned IP addresses
  B. IP device tracking is not configured properly

• Question 433:

  Which functionality does the Cisco ISE BYOD flow provide?

  A. It provides support for native supplicants, allowing users to connect devices directly to the network.
  B. It provides the My Devices portal, allowing users to add devices to the network.
  C. It provides support for users to install the Cisco NAC agent on enterprise devices.
  D. It provides self-registration functionality to allow guest users to access the network.
  A. It provides support for native supplicants, allowing users to connect devices directly to the network.

• Question 434:

  A new consultant must be granted network access for only six months. Which type of ISE default guest account must be used to allow this access1?

  A. contractor B. temporary
  C. employee
  D. annual
  A. contractor B. temporary

• Question 435:

  A security engineer must create an Antivirus remediation policy within Cisco ISE. Which two options can the engineer select in the new Antivirus remediation policy? (Choose two.)

  A. program installation path
  B. Antivirus vendor name
  C. uniform resource locator
  D. file to upload
  E. operating system
  B. Antivirus vendor name
  E. operating system

• Question 436:

  Which action do you take to restrict network access for endpoints that are not posture compliant?

  A. Configure a dACL on the NAD.
  B. Configure client provisioning services on the Cisco ISE Server
  C. Assian a dynamjc VLAN oq the, NAD.
  D. Define the policy by configuring a standard profile.s
  A. Configure a dACL on the NAD.

• Question 437:

  Which two options can be pushed from Cisco ISE server as part of successful 802.1x authentication?

  A. Reauthentication timer
  B. DACL
  C. Vlan
  D. Authentication order
  E. Posture status
  F. Authentication priority
  B. DACL
  C. Vlan

• Question 438:

  When a wireless client enters the noncompliant posture status, how can it restart the posture session?

  A. It must discount from the SSID for any interval and then reconnect.
  B. The wireless interface on the client must be disable and re-enabled.
  C. It must associate to a different SSID.
  D. It must disconnect from the SSID, wait for the idle timeout period to expire, and then reconnect.
  D. It must disconnect from the SSID, wait for the idle timeout period to expire, and then reconnect.

• Question 439:

  A security engineer must provision dynamic TrustSec classifications. Which two classification options must the engineer select to accomplish this task? (Choose two.)

  A. interface
  B. 802.1X
  C. MAB
  D. IP subnet
  E. VLAN
  B. 802.1X
  C. MAB

• Question 440:

  Which statement about a distributed Cisco ISE deployment is true?

  A. It can support up to two monitoring Cisco ISE nodes for high availability.
  B. It can support up to three load-balanced Administration ISE nodes.
  C. Policy Service ISE nodes can be configured in a redundant failover configuration.
  D. The Active Directory servers of Cisco ISE can be configured in a load-balanced configuration.
  A. It can support up to two monitoring Cisco ISE nodes for high availability.