Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 61:

  In which scenario might it be helpful to adjust the network transition delay timer?

  A. when the client needs more time to log in to the network
  B. when the client needs more time to perform compliance checks
  C. when the client needs more time to obtain a DHCP lease
  D. when the client needs more time to perform remediation
  C. when the client needs more time to obtain a DHCP lease

• Question 62:

  You have a VPN client that is quarantined. Which action do you take to restart the posture session?

  A. Send a CoA message
  B. Reconnect the VPN tunnel.
  C. Configure a authentication timer
  D. Enable periodic reassessment
  A. Send a CoA message

• Question 63:

  Which command or command sequence can you enter to configure a DACL on the Cisco ISE?

  A. ip access-list extended 101 permit ip any any
  B. access-list 101 permit ip any any
  C. ip access-list standard 99 permit ip any
  D. permit ip any any
  A. ip access-list extended 101 permit ip any any

• Question 64:

  Which two troubleshooting tools are available within the diagnostics tools menu in cisco ISE? (Choose two.)

  A. TCP Dump
  B. Expert Troubleshooter
  C. Execute Network Device
  D. AAA Authentication Trouble
  E. Policy Validator
  A. TCP Dump
  D. AAA Authentication Trouble

• Question 65:

  Which set of commands allows IPX inbound on all interfaces?

  A. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface global
  B. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface inside
  C. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface outside
  D. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow out interface global
  A. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface global

• Question 66:

  When configuring NAT, which three protocols that are shown may have limitations or complications when using NAT? (Choose three.)

  A. Kerberos
  B. HTTPS
  C. NTP
  D. SIP
  E. FTP
  F. SQL
  A. Kerberos
  D. SIP
  E. FTP

• Question 67:

  Which action must be taken by a Noncompliant wireless client to get out of quarantine status?

  A. Disconnect from the WLAN controller and let the idle.
  B. Adjust policy in BYOD portal.
  C. Perform a periodic reassessment.
  D. Download Posture Update.
  A. Disconnect from the WLAN controller and let the idle.

• Question 68:

  To disable devices not currently on the network?

  A. Shutdown
  B. Disconnect
  C. Dot1x
  D. Cisco NAC Agent
  D. Cisco NAC Agent

• Question 69:

  A user is on a wired connection and the posture status is noncompliant. Which state will their EPS session be placed in?

  A. disconnected
  B. limited
  C. no access
  D. quarantined
  D. quarantined

• Question 70:

  What are three ways that an SGT can be assigned to network traffic?

  A. Manual binding of the IP address to an SGT
  B. Manually configured on the switch port
  C. Dynamically assigned by the network access device
  D. Dynamically assigned by the 802.1X authorization result
  E. Manually configured in the NAC agent profile
  F. Dynamically assigned by the AnyConnect network access manager
  A. Manual binding of the IP address to an SGT
  B. Manually configured on the switch port
  D. Dynamically assigned by the 802.1X authorization result