Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 461:

  In Cisco ISE, which two actions can be taken based on matching a profiler policy? (Choose two).

  A. exception
  B. network scan (NMAP)
  C. delete endpoint
  D. automatically remediate
  E. create matching identity group
  A. exception
  B. network scan (NMAP)

• Question 462:

  which option in the SSID must be enable to immediately connect to the corp SSID in DUAL SSID deployment?

  A. AP Fallback
  B. SSID fast transition
  C. AAA override
  D. option
  C. AAA override

• Question 463:

  A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

  A. Authenticate guest users to Cisco ISE.
  B. Keep track of guest user activities.
  C. Create and manage guest user accounts.
  D. Configure authorization setting for guest users.
  C. Create and manage guest user accounts.

• Question 464:

  Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.)

  A. Windows Active Directory
  B. LDAP
  C. RADIUS token server
  D. internal endpoint store
  E. internal user store
  F. certificate authentication profile
  G. RSA SecurID
  A. Windows Active Directory
  E. internal user store

• Question 465:

  Which three network access devices allow for static security group tag assignment? (Choose three.)

  A. intrusion prevention system
  B. access layer switch
  C. data center access switch
  D. load balancer
  E. VPN concentrator
  F. wireless LAN controller
  B. access layer switch
  C. data center access switch
  E. VPN concentrator

• Question 466:

  Which guest service requires session services to be enabled on a cisco ISE node?

  A. administration service
  B. monitoring service
  C. posture service
  D. profiling service
  A. administration service

• Question 467:

  An engineer has created a redirect ACL to forward traffic to Cisco ISE. Which TCP port is used for the guest portal On ISE?

  A. 8080
  B. 443
  C. 8021
  D. 8443
  D. 8443

• Question 468:

  Which characteristic of an SGT enforcement policy is true?

  A. An SGFW has an implicit permit at the beginning.
  B. An SGFW has an implicit deny at the end.
  C. An SGACL has an implicit deny at the end.
  D. An SGACL has an explicit deny at the beginning.
  B. An SGFW has an implicit deny at the end.

• Question 469:

  Which two options must be used on Cisco ISE to enable the TACACS+ feature? (Choose two.)

  A. TACACS External Servers
  B. TACACS+ Authentication Settings
  C. TACACS Server Sequence
  D. Enable Device Admin Service
  E. TACACS Command Sets
  F. TACACS Profiles
  G. Device Administration License
  D. Enable Device Admin Service
  G. Device Administration License

• Question 470:

  Which three components comprise the Cisco ISE profiler? (Choose three.)

  A. the sensor, which contains one or more probes
  B. the probe manager
  C. a monitoring tool that connects to the Cisco ISE
  D. the trigger, which activates ACLs
  E. an analyzer, which uses configured policies to evaluate endpoints
  F. a remitter tool, which fails over to redundant profilers
  A. the sensor, which contains one or more probes
  B. the probe manager
  E. an analyzer, which uses configured policies to evaluate endpoints