Cisco 300-208 Free Practice Questions

Question No: 8

Refer to the exhibit.

Which three statements about the given configuration are true? (Choose three.)

A. TACACS+ authentication configuration is complete.

B. TACACS+ authentication configuration is incomplete.

C. TACACS+ server hosts are configured correctly.

D. TACACS+ server hosts are misconfigured.

E. The TACACS+ server key is encrypted.

F. The TACACS+ server key is unencrypted.

View Answer

Question No: 9

Which effect does the ip http secure-server command have on a Cisco ISE?

A. It enables the HTTP server for users to connect on the command line.

B. It enables the HTTP server for users to connect by using web-based authentication.

C. It enables the HTTPS server for users to connect by using web-based authentication.

D. It enables the HTTPS server for users to connect on the command line.

View Answer

Question No: 10

Which feature must you configure on a switch to allow it to redirect wired endpoints to Cisco ISE?

A. the http secure-server command

B. RADIUS Attribute 29

C. the RADIUS VSA for accounting

D. the RADIUS VSA for URL-REDIRECT

View Answer

Question No: 11

A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and

an employee SSID is used for company network access. Which controller option must be enabled to allow a

user to switch immediately from the provisioning SSID to the employee SSID after registration has been

completed?

A. AAA override

B. User Idle Timeout

C. Fast SSID Change

D. AP Fallback

View Answer

Question No: 12

Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.)

A. Windows Active Directory

B. LDAP

C. RADIUS token server

D. internal endpoint store

E. internal user store

F. certificate authentication profile

G. RSA SecurID

View Answer

Question No: 13

Which Cisco ISE feature can differentiate a corporate endpoint from a personal device?

A. EAP chaining

B. PAC files

C. authenticated in-band provisioning

D. machine authentication

View Answer

Question No: 14

Which three options can be pushed from Cisco ISE server as part of a successful 802.1x authentication. (Choose three)

A. authentication order

B. posture status

C. authentication priority

D. vlan

E. DACL

F. re-authentication timer

View Answer

Question No: 15

A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and an employee SSID is used for company network access. How is the layer 2 security of the provisioning SSID configured?

A. 802.1X

B. Open

C. WPA2

D. MAC filtering disabled

View Answer

Question No: 16

Refer to the exhibit.

The links outside the TrustSec area in the given SGA architecture are unprotected. On which two links does EAC take place? (Choose two.)

A. between switch 2 and switch 3

B. between switch 5 and host 2

C. between host 1 and switch 1

D. between the authentication server and switch 4

E. between switch 1 and switch 2

F. between switch 1 and switch 5

View Answer

Question No: 17

Which command can check a AAA server authentication for server group Group1, user cisco, and password cisco555 on a Cisco ASA device?

A. ASA# test aaa-server authentication Group1 username cisco password cisco555

B. ASA# test aaa-server authentication group Group1 username cisco password cisco555

C. ASA# aaa-server authorization Group1 username cisco password cisco555

D. ASA# aaa-server authentication Group1 roger cisco555

View Answer