Cisco 300-208 Braindumps 2021

NEW QUESTION 1
An engineer has discovered that a NAD is already configured to send packets to the cisco ISE node running session services, which probe profile requires the simplest configuration?

• A. RADIUS
• B. DHCP
• C. SPAN
• D. NMAP
• E. HTTP

Answer: A

NEW QUESTION 2
Where is dynamic SGT classification configured?

• A. Cisco ISE
• B. NAD
• C. supplicant
• D. RADIUS proxy

Answer: A

NEW QUESTION 3
Under which circumstance would an inline posture node be deployed?

• A. When the NAD does not support CoA
• B. When the NAD cannot support the number of connected endpoints
• C. When a PSN is overloaded
• D. To provide redundancy for a PSN

Answer: A

NEW QUESTION 4
What is another term for 802.11i wireless network security?

• A. 802.1x
• B. WEP
• C. TKIP
• D. WPA
• E. WPA2

Answer: E

NEW QUESTION 5
Which two components are required to connect to a WLAN network that is secured by EAP-TLS authentication? (Choose two.)

• A. Kerberos authentication server
• B. AAA/RADIUS server
• C. PSKs
• D. CA server

Answer: BD

NEW QUESTION 6
Refer to the exhibit.

If the host sends a packet across the Cisco TrustSec domain, where is the SGACL enforced?

• A. At the egress router
• B. Dynamically at the host
• C. After the packet enters the Cisco TrustSec domain
• D. At the ingress router.

Answer: A

NEW QUESTION 7
Which EAP method uses a modified version of the MS-CHAP authentication protocol?

• A. EAP-POTP
• B. EAP-TLS
• C. LEAP
• D. EAP-MD5

Answer: C

NEW QUESTION 8
Where must periodic re-authentication be configured to allow a client to come out of the quarantine state and become compliant?

• A. on the switch port
• B. on the router port
• C. on the supplicant
• D. on the controller

Answer: A

NEW QUESTION 9
Which action does the command private-vlan association 100,200 take?

• A. configures VLANs 100 and 200 and associates them as a community
• B. associates VLANs 100 and 200 with the primary VLAN
• C. creates two private VLANs with the designation of VLAN 100 and VLAN 200
• D. assigns VLANs 100 and 200 as an association of private VLANs

Answer: B

NEW QUESTION 10
Which RADIUS attribute can be used to dynamically assign the inactivity active timer for MAB users from Cisco ISE node?

• A. Idle-timeout attribute
• B. Session-timeout attribute
• C. Radius-server timeout
• D. Termination-action attribute

Answer: A

NEW QUESTION 11
Which two portals can be configured to use portal FQDN? (Choose two.)

• A. admin
• B. sponsor
• C. guest
• D. my devices
• E. monitoring and troubleshooting

Answer: BD

NEW QUESTION 12
Which statement about system time and NTP server configuration with Cisco ISE is true?

• A. The system time and NTP server settings can be configured centrally on the Cisco ISE.
• B. The system time can be configured centrally on the Cisco ISE, but NTP server settings must be configured individually on each ISE node.
• C. NTP server settings can be configured centrally on the Cisco ISE, but the system time must be configured individually on each ISE node.
• D. The system time and NTP server settings must be configured individually on each ISE node.

Answer: D

NEW QUESTION 13
Which WLC debug command would be used to troubleshoot authentication issues on a 802. 1X enabled WLAN?

• A. debug dot11 aaa manager all
• B. debug wps mfp Iwapp
• C. debug dot11 state
• D. debug dotlx events

Answer: A

NEW QUESTION 14
What are the two values Cisco recommends that you configure and test when deploying MAB 802.1x? (Choose two.)

• A. supp-timeout
• B. server-timeout
• C. max-req
• D. max-reauth-req
• E. tx-period

Answer: BD

NEW QUESTION 15
Refer to the exhibit.

Which statement about the authentication protocol used in the configuration is true?

• A. There is separate authentic and authorization request packet.
• B. The authentication request contains only a password.
• C. The authentication and authorization requests are grouped in a single packet.
• D. The authentication request contains only a username.

Answer: B

NEW QUESTION 16
Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)

• A. LLDP agent information
• B. user agent
• C. DHCP options
• D. open ports
• E. operating system
• F. trunk ports

Answer: AC

NEW QUESTION 17
Which three statements describe differences between TACACS+ and RADIUS? (Choose three.)

• A. RADIUS encrypts the entire packet, while TACACS+ encrypts only the password.
• B. TACACS+ encrypts the entire packet, while RADIUS encrypts only the password.
• C. RADIUS uses TCP, while TACACS+ uses UDP.
• D. TACACS+ uses TCP, while RADIUS uses UDP.
• E. RADIUS uses ports 1812 and 1813, while TACACS+ uses port 49.
• F. TACACS+ uses ports 1812 and 1813, while RADIUS uses port 49

Answer: BDE

NEW QUESTION 18
Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

• A. LLDP agent information
• B. user agent
• C. DHCP options
• D. open ports
• E. CDP agent information
• F. FQDN

Answer: BC

NEW QUESTION 19
A network administration wants to set up a posture condition on Cisco ISE to check for the file name Posture.txt in C: on a Windows machine. Which condition must the network administrator configuration?

• A. Service condition
• B. Registry condition
• C. Application condition
• D. File condition

Answer: D