Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 51:

  Where is dynamic SGT classification configured?

  A. Cisco ISE
  B. NAD
  C. supplicant
  D. RADIUS proxy
  A. Cisco ISE

• Question 52:

  In AAA, what function does authentication perform?

  A. It identifies the actions that the user can perform on the device.
  B. It identifies the user who is trying to access a device.
  C. It identifies the actions that a user has previously taken.
  D. It identifies what the user can access.
  B. It identifies the user who is trying to access a device.

• Question 53:

  A wireless deployment must check guest device compliance before allowing access to the network. Which type of guest deployment is needed to allow the Client Provisioning portal?

  A. central web authentication
  B. sponsored
  C. hotspot
  D. self-registered
  C. hotspot

• Question 54:

  Which administrative role has permission to assign Security Group Access Control Lists?

  A. System Admin
  B. Network Device Admin
  C. Policy Admin
  D. Identity Admin
  C. Policy Admin

• Question 55:

  Which two options can a sponsor select to create bulk guest accounts from the sponsor portal? (Choose two.)

  A. Known
  B. Random
  C. Monthly
  D. Imported
  E. Daily
  F. Yearly
  B. Random
  D. Imported

• Question 56:

  How long are sessions kept in the ISE Monitoring and Troubleshooting node If there is authentication but no accounting?

  A. 5 hours
  B. 5 days
  C. 1 hour
  D. 1 day
  C. 1 hour

• Question 57:

  What are the initial steps to configure an ACS as a TACACS server?

  A. 1. Choose Network Devices and AAA Clients > Network Resources. 2. Click Create.
  B. 1. Choose Network Resources > Network Devices and AAA Clients. 2. Click Create.
  C. 1. Choose Network Resources > Network Devices and AAA Clients. 2. Click Manage.
  D. 1. Choose Network Devices and AAA Clients > Network Resources. 2. Click Install.
  B. 1. Choose Network Resources > Network Devices and AAA Clients. 2. Click Create.

• Question 58:

  An engineer must enable SGACL policy globally for a Cisco TrustSec -enabled routed interface. Which command must be used?

  A. cts role-based monitor enable
  B. cts role-based enfrocement
  C. cts role-based sgt-caching with-enforcement
  D. cts role-based monitor permissions from {sgt_num} to {dgt_num}][ipv4| ipv6]
  B. cts role-based enfrocement

• Question 59:

  What user rights does an account need to join ISE to a Microsoft Active Directory domain?

  A. Create and Delete Computer Objects
  B. Domain Admin
  C. Join and Leave Domain
  D. Create and Delete User Objects
  A. Create and Delete Computer Objects

• Question 60:

  What is a required step when you deploy dynamic VLAN and ACL assignments?

  A. Configure the VLAN assignment.
  B. Configure the ACL assignment.
  C. Configure Cisco IOS Software 802.1X authenticator authorization.
  D. Configure the Cisco IOS Software switch for ACL assignment.
  C. Configure Cisco IOS Software 802.1X authenticator authorization.