300-208 Exam Questions

Page 1

300-208 - Implementing Cisco Secure Access Solutions exam in just 24 HOURS!

100% REAL EXAM QUESTIONS ANSWERS 300-208 - Implementing Cisco Secure Access Solutions Buy Complete Questions Answers File from

http://www.exams4sure.com/Cisco/300-208-practice-examdumps.html 100% Exam Passing Guarantee & Money Back Assurance

Sample Question


Question No 1: Wireless client supplicants attempting to authenticate to a wireless network are generating excessive log messages. Which three WLC authentication settings should be disabled? (Choose three.) A. B. C. D. E. F.

RADIUS Server Timeout RADIUS Aggressive-Failover Idle Timer Session Timeout Client Exclusion Roaming

Answer: B, C, D Question No 2: Which two authentication stores are supported to design a wireless network using PEAP EAPMSCHAPv2 as the authentication method? (Choose two.) A. B. C. D. E.

Microsoft Active Directory ACS LDAP RSA Secure-ID Certificate Server

Answer: A, B Question No 3: What is another term for 802.11i wireless network security? A. B. C. D. E.

802.1x WEP TKIP WPA WPA2

Answer: E


Question No 4: Which two EAP types require server side certificates? (Choose two.) A. B. C. D. E. F.

EAP-TLS PEAP EAP-MD5 LEAP EAP-FAST MSCHAPv2

Answer: A, B Question No 5: Where is client traffic decrypted in a controller-based wireless network protected with WPA2 Security? A. B. C. D.

Access Point Switch Wireless LAN Controller Authentication Server

Answer: A Question No 6: Which setting provides the best security for a WLAN and authenticates users against a centralized directory store? A. B. C. D.

WPA2 AES-CCMP and 801.X authentication WPA2 AES-CCMP and PSK authentication WPA2 TKIP and PSK authentication WPA2 TKIP and 802.1X authentication

Answer: A Question No 7: What is a feature of Cisco WLC and IPS synchronization? A. B. C. D.

Cisco WLC populates the ACLs to prevent repeat intruder attacks. The IPS automatically send shuns to Cisco WLC for an active host block. Cisco WLC and IPS synchronization enables faster wireless access. IPS synchronization uses network access points to provide reliable monitoring.

Answer: B


Question No 8: Which two components are required to connect to a WLAN network that is secured by EAPTLS authentication? (Choose two.) A. B. C. D.

Kerberos authentication server AAA/RADIUS server PSKs CA server

Answer: B, D Question No 9: Which statement about Cisco Management Frame Protection is true? A. It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point. B. It detects spoofed MAC addresses. C. It identifies potential RF jamming attacks. D. It protects against frame and device spoofing.

Answer: D Question No 10: Which three statements about the Cisco wireless IPS solution are true? (Choose three.) A. It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point. B. It detects spoofed MAC addresses. C. It identifies potential RF jamming attacks. D. It protects against frame and device spoofing. E. It allows the WLC to failover because of congestion.

Answer: B, C, D

Buy Complete Questions Answers File from 100% Exam Passing Guarantee & Money Back Assurance  PDF Version + Test Engine Software Version  90 Days Free Updates Service


ï‚· Valid for All Countries

http://www.exams4sure.com/Cisco/300-208-practice-examdumps.html


Turn static files into dynamic content formats.

Create a flipbook
Issuu converts static files into: digital portfolios, online yearbooks, online catalogs, digital photo albums and more. Sign up and create your flipbook.