Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 451:

  Wich two services that TACACS+ support?

  A. x509
  B. dot1q
  C. dot1x
  D. Native AD
  A. x509
  D. Native AD

• Question 452:

  Which network access device feature can you configure to gather raw endpoint data?

  A. Device Sensor
  B. Device Classifier
  C. Switched Port Analyzer
  D. Trust Anchor
  A. Device Sensor

• Question 453:

  Which three pieces of information can be found in an authentication detail report? (Choose three.)

  A. DHCP vendor ID
  B. user agent string
  C. the authorization rule matched by the endpoint
  D. the EAP method the endpoint is using
  E. the RADIUS username being used
  F. failed posture requirement
  C. the authorization rule matched by the endpoint
  D. the EAP method the endpoint is using
  E. the RADIUS username being used

• Question 454:

  When you are configuring DHCP snooping, how should you classify access ports?

  A. untrusted
  B. trusted
  C. promiscuous
  D. private
  A. untrusted

• Question 455:

  A network administrator wants to use dynamic VLAN assignment from Cisco ISE. Which option must be configured on the switch to support this?

  A. AAA authentication
  B. VTP
  C. DTP
  D. AAA authorization
  D. AAA authorization

• Question 456:

  You discover that the Cisco ISE is failing to connect to the Active Directory server. Which option is a possible cause of the problem?

  A. NTP server time synchronization is configured incorrectly.
  B. There is a certificate mismatch between Cisco ISE and Active Directory.
  C. NAT statements required for Active Directory are configured incorrectly.
  D. The RADIUS authentication ports are being blocked by the firewall.
  A. NTP server time synchronization is configured incorrectly.

• Question 457:

  Refer to the exhibit. Which is the mode operational flow showed in the figure?

  

  A. closed
  B. bypass
  C. low-impact
  D. monitor
  C. low-impact

• Question 458:

  Which type of probe is required when using a Cisco IOS Sensor-enabled network switch?

  A. network scan probe
  B. HTTP probe
  C. RADIUS probe
  D. NetFlow probe
  C. RADIUS probe

• Question 459:

  Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What is the most likely cause of the problem?

  A. EAP-TLS is not checked in the Allowed Protocols list
  B. Certificate authentication profile is not configured in the Identity Store
  C. MS-CHAPv2-is not checked in the Allowed Protocols list
  D. Default rule denies all traffic
  E. Client root certificate is not included in the Certificate Store
  A. EAP-TLS is not checked in the Allowed Protocols list

• Question 460:

  Which method of registering devices on the BYOD My Devices Portal requires that the user have a supplicant installed?

  A. MAB
  B. single SS1D
  C. web authentication
  D. dual SSID
  B. single SS1D