Questions And Answers PDF
Cisco 300-208 Implementing Cisco Secure Access Solutions (SISAS)
Version: DEMO
http://www.TestWarrior.com/300-208-practice-exam.html
FOR 300-208 Candidates: We offer Two Products: 1st - We have Practice Tests Software with Actual Exam Questions 2nd - Questions and Answers in PDF Format. Try a Free DEMO of these Exam Products via below Link:
http://www.TestWarrior.com/300-208-practice-exam.html
TestWarrior.com
1
Questions And Answers PDF
Version: 11.0 Question 1 A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentcaton method should be selected? A. TACACS+ B. RADIUS C. Windows Actve Directory D. Generic LDAP
Aoswern A Question 2 An administrator can leverage which atribute to assign privileges based on Microsof Actve Directory user groups? A. member of B. group C. class D. person
Aoswern A Question 3 Cisco 802.1X phasing enables fexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristc of the most secure mode? A. Granular ACLs applied prior to authentcaton B. Per user dACLs applied afer successful authentcaton C. Only EAPoL trafc allowed prior to authentcaton D. Adjustable 802.1X tmers to enable successful authentcaton
Aoswern C Question 4 A network administrator must enable which protocol extension to utliie EAP-Chaining? A. EAP-FAST B. EAP-TLS C. MSCHAPv2 D. PEAP
TestWarrior.com
2
Questions And Answers PDF
Aoswern A Question 5 In the command 'aaa authentcaton default group tacacs local', how is the word 'default' defned? A. Command set B. Group name C. Method list D. Login type
Aoswern C Question 6 Changes were made to the ISE server while troubleshootng, and now all wireless certfcate authentcatons are failing. Logs indicate an EAP failure. What is the most likely cause of the problem? A. EAP-TLS is not checked in the Allowed Protocols list B. Certfcate authentcaton profle is not confgured in the Identty Store C. MS-CHAPv2-is not checked in the Allowed Protocols list D. Default rule denies all trafc E. Client root certfcate is not included in the Certfcate Store
Aoswern A Question 7 The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node? A. tcp/8905 B. udp/8905 C. htp/80 D. htps///3
Aoswern B Question 8 Which two conditons are valid when confguring ISE for posturing? (Choose two.) A. Dictonary B. member Of C. Profle status D. File E. Service
TestWarrior.com
3
Questions And Answers PDF
Aoswern D,E Question 9 Refer to the exhibit.
Which three statements about the given confguraton are true? (Choose three.) A. TACACS+ authentcaton confguraton is complete. B. TACACS+ authentcaton confguraton is incomplete. C. TACACS+ server hosts are confgured correctly. D. TACACS+ server hosts are misconfgured. E. The TACACS+ server key is encrypted. F. The TACACS+ server key is unencrypted.
Aoswern B,C,F Question 10 In AAA, what functon does authentcaton perform? A. It identfes the actons that the user can perform on the device. B. It identfes the user who is trying to access a device. C. It identfes the actons that a user has previously taken. D. It identfes what the user can access.
Aoswern B Question 11 Which identty store opton allows you to modify the directory services that run on TCP/IP? A. Lightweight Directory Access Protocol B. RSA SecurID server C. RADIUS D. Actve Directory
Aoswern A Question 12 Which term describes a sofware applicaton that seeks connectvity to the network via a network access device?
TestWarrior.com
/
Questions And Answers PDF
A. authentcator B. server C. supplicant D. WLC
Aoswern C Question 13 Cisco ISE distributed deployments support which three features? (Choose three.) A. global implementaton of the profler service CoA B. global implementaton of the profler service in Cisco ISE C. confguraton to send system logs to the appropriate profler node D. node-specifc probe confguraton E. server-specifc probe confguraton F. NetFlow probes
Aoswern A,C,D Question 14 How frequently does the Profled Endpoints dashlet refresh data? A. every 30 seconds B. every 60 seconds C. every 2 minutes D. every 5 minutes
Aoswern B Question 15 Which command in the My Devices Portal can restore a previously lost device to the network? A. Reset B. Found C. Reinstate D. Request
Aoswern C Question 16 What is the frst step that occurs when provisioning a wired device in a BYOD scenario? A. The smart hub detects that the physically connected endpoint requires confguraton and must use MAB to authentcate.
TestWarrior.com
5
Questions And Answers PDF
B. The URL redirects to the Cisco ISE Guest Provisioning portal. C. Cisco ISE authentcates the user and deploys the SPW package. D. The device user atempts to access a network URL.
Aoswern A Question 17 Which three features should be enabled as best practces for MAB? (Choose three.) A. MD5 B. IP source guard C. DHCP snooping D. storm control E. DAI F. URPF
Aoswern B,C,E Question 18 When MAB is confgured, how ofen are ports reauthentcated by default? A. every 60 seconds B. every 90 seconds C. every 120 seconds D. never
Aoswern D Question 19 What is a required step when you deploy dynamic VLAN and ACL assignments? A. Confgure the VLAN assignment. B. Confgure the ACL assignment. C. Confgure Cisco IOS Sofware 802.1X authentcator authoriiaton. D. Confgure the Cisco IOS Sofware switch for ACL assignment.
Aoswern C Question 20 Which model does Cisco support in a RADIUS change of authoriiaton implementaton? A. push B. pull C. policy D. security
TestWarrior.com
6
Questions And Answers PDF
Aoswern A
TestWarrior.com
7
Questions And Answers PDF
Thank You for Trying Our Product Visit Our Site to Purchase the Full Set of Actual 300-208 Exam Questions With Answers.
http://www.TestWarrior.com/300-208-practice-exam.html We Also Provide Practice Exam Software That Simulates Real Exam Environment And Has Many Self-Assessment Features. Download Free Product Demo From:
Download Free Product Demo from: http://www.TestWarrior.com/300-208-practice-exam.html
Check Out Our Customer Testimonials
TestWarrior.com
8