Cisco 300-208 Online Practice Questions and Exam Preparation

Cisco 300-208 Online Questions & Answers

• Question 71:

  What is the purpose of the Cisco ISE Guest Service Sponsor Portal?

  A. It tracks and stores user activity while connected to the Cisco ISE.
  B. It securely authenticates guest users for the Cisco ISE Guest Service.
  C. It filters guest users from account holders to the Cisco ISE.
  D. It creates and manages Guest User accounts.
  D. It creates and manages Guest User accounts.

• Question 72:

  Which supplicants(s) and server(s) are capable of supporting EAP-CHAINING?

  A. Cisco AnyConnect NAM and Cisco Access Control Server
  B. Cisco Secure Services Client and Cisco Access Control Server
  C. Cisco AnyConnect NAM and Cisco Identity Service Engine
  D. Windows Native Supplicant and Cisco Identity Service Engine
  C. Cisco AnyConnect NAM and Cisco Identity Service Engine

• Question 73:

  A security engineer has a new TrustSec project and must create a few static security group tag classifications as a proof of concept. Which two classifications can the tags be mapped to? (Choose two.)

  A. VLAN
  B. user ID
  C. interface
  D. switch ID
  E. MAC address
  A. VLAN
  C. interface

• Question 74:

  What are two possible reasons why a scheduled nightly backup of ISE to a FTP repository would fail? (Choose two.)

  A. ISE attempted to write the backup to an invalid path on the FTP server.
  B. The ISE and FTP server clocks are out of sync.
  C. The username and password for the FTP server are invalid.
  D. The server key is invalid or misconfigured.
  E. TCP port 69 is disabled on the FTP server.
  A. ISE attempted to write the backup to an invalid path on the FTP server.
  C. The username and password for the FTP server are invalid.

• Question 75:

  What are Supplicant and Authentication server that support EAP Chaining?

  A. Cisco Anyconnect NAM
  B. ACS
  C. ISE
  D. NFL
  A. Cisco Anyconnect NAM
  C. ISE

• Question 76:

  Refer to the exhibit. You are configuring permissions for a new Cisco ISE standard authorization profile. If you configure the Tunnel-Private-Group-ID attribute as shown, what does the value 123 represent?

  

  A. the VLAN ID
  B. the VRF ID
  C. the tunnel ID
  D. the group ID
  A. the VLAN ID

• Question 77:

  If user want to use his corporate laptop in another network ,what is only agent can work with this environment ?

  A. Cisco NAC agent.
  A. Cisco NAC agent.

• Question 78:

  Which statement about the CAK is true?

  A. It is the master key that generates the other keys that MACsec requires.
  B. Failed MACsec connections fall back to MAB by default.
  C. It is the key that is used to discover MACsec peers and perform key negotiation between the peers.
  D. It is the secret key that encrypts traffic during the connection.
  E. It is the key that is used to negotiate session encryption keys.
  A. It is the master key that generates the other keys that MACsec requires.

• Question 79:

  The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node?

  A. tcp/8905
  B. udp/8905
  C. http/80
  D. https/443
  A. tcp/8905

• Question 80:

  Which two types of client provisioning resources are used for BYOD implementations? (Choose two.)

  A. user agent
  B. Cisco NAC agent
  C. native supplicant profiles
  D. device sensor
  E. software provisioning wizards
  C. native supplicant profiles
  E. software provisioning wizards