Vendor:Cisco

Exam Code:300-208

Exam Name:Implementing Cisco Secure Access

Solutions

Version:Demo
QUESTION 1

Which command used to enable SGACL globallly on a router interface?

A. cts role-based-basic

B. cts role-based-enable

C. cts role-based-enforcement

D. cts role-based monitor permissions from { sgt_num } to { dgt_num }][ ipv4 | ipv6 ]

Correct Answer: C

QUESTION 2

Which characteristic of static SGT classification is true?

A. uses MAB

B. maps a tag to an IP address

C. maps a tag to a MAC address

D. uses web authentication

Correct Answer: A

QUESTION 3

Which authorization method is the Cisco best practice to allow endpoints access to the Apple App store or Google Play
store with Cisco WLC software version 7.6 or newer?

A. dACL

B. DNS ACL

C. DNS ACL defined in Cisco ISE

D. redirect ACL

Correct Answer: B

QUESTION 4

Which two troubleshooting tools are available within the diagnostics tools menu in cisco ISE? (Choose two.)

A. TCP Dump
B. Expert Troubleshooter

C. Execute Network Device

D. AAA Authentication Trouble

E. Policy Validator

Correct Answer: AD

QUESTION 5

Refer to the exhibit. Which two things must be verified if authentication is failing with this error message? (Choose two.)

A. Cisco ISE EAP identity certificate is valid.

B. CA cert chain of Cisco ISE EAP certificate is installed on the trusted certs store of the client machine.

C. CA cert chain of the client certificate is installed on Cisco ISE.

D. Cisco ISE HTTPS/admin certificate is valid.

E. Cisco ISE server certificate is installed on the client.

Correct Answer: AE

QUESTION 6

Which three network access devices allow for static security group tag assignment? (Choose three.)

A. intrusion prevention system

B. access layer switch

C. data center access switch

D. load balancer

E. VPN concentrator

F. wireless LAN controller

Correct Answer: BCE

QUESTION 7

Cisco ISE antivirus remediation policy options?

A. Upload a file

B. Antivirus

C. Uniform resource locator

Correct Answer: AC

http://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/116143-config-cise- posture-00.html

QUESTION 8

A network administrator must enable which protocol to utilize EAP-Chaining?

A. EAP-FAST

B. EAP-TLS

C. MSCHAPv2

D. PEAP

Correct Answer: A

QUESTION 9

if user want to use his corporate laptop in another network ,what is only agent can work with this environment ?

A. windows web agent

B. mac web agent

C. Cisco NAC agent

D. mac agent NAC

Correct Answer: C

QUESTION 10

In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose
three.)

A. configuration
B. authentication

C. sensing

D. policy requirements

E. monitoring

F. repudiation

Correct Answer: ABD

QUESTION 11

Which command is useful when troubleshooting AAA Authentication between a Cisco router and the AAA server?

A. test aaa-server test cisco cisco123 all new-code

B. test aaa group7 tacacs+ auth cisco123 new-code

C. test aaa group tacacs+ cisco cisco123 new-code

D. test aaa-server tacacs+ group7 cisco cisco123 new-code

Correct Answer: C

QUESTION 12

Certain endpoints are missing DHCP profiling data.

Which option describes what can be used to determine if DHCP requests from clients are reaching Cisco ISE?

A. output of show interface gigabitEthernet 0 from the CLI

B. output of debug logging all 7 from the CLI

C. output of show logging application profiler.log from the CLI

D. the TCP dump diagnostic tool through the GUI

E. the posture troubleshooting diagnostic tool through the GUI

Correct Answer: D
 To Read the Whole Q&As, please purchase the Complete Version from Our website.

Try our product !

100% Guaranteed Success

100% Money Back Guarantee

365 Days Free Update

Instant Download After Purchase

24x7 Customer Support

Average 99.9% Success Rate

More than 800,000 Satisfied Customers Worldwide

Multi-Platform capabilities - Windows, Mac, Android, iPhone, iPod, iPad, Kindle

Need Help
Please provide as much detail as possible so we can best assist you.
To update a previously submitted ticket:

Any charges made through this site will appear as Global Simulators Limited.
All trademarks are the property of their respective owners.

Powered by TCPDF (www.tcpdf.org)