Cisco 300-208 Free Practice Questions

Question No: 9

Which statement about Cisco Management Frame Protection is true?

A. It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point.

B. It detects spoofed MAC addresses.

C. It identifies potential RF jamming attacks.

D. It protects against frame and device spoofing.

View Answer

Question No: 10

A network is seeing a posture status u201cunknownu201d for a single corporate machine on the Cisco ISE authentication

report, whereas the other machines and reported as u201ccomplaintu201d. Which option is the reason for machine being

reported as u201cunknownu201d?

A. Posture compliance condition is missing on the machine.

B. Posture agent is not installed on the machine.

C. Posture service is disabled on Cisco ISE.

D. Posture policy does not support the OS.

View Answer

Question No: 11

CORRECT TEXT

The Secure-X company has started to tested the 802.1X authentication deployment using the Cisco Catalyst 3560-X layer 3 switch and the Cisco ISEvl2 appliance. Each employee desktop will be connected to the 802.1X enabled switch port and will use the Cisco AnyConnect NAM 802.1X supplicant to log in and connect to the network.

Your particular tasks in this simulation are to create a new identity source sequence named AD_internal which will first use the Microsoft Active Directory (AD1) then use the ISE Internal User database. Once the new identity source sequence has been configured, edit the existing DotlX authentication policy to use the new AD_internal identity source sequence.

The Microsoft Active Directory (AD1) identity store has already been successfully configured, you just need to reference it in your configuration.

In addition to the above, you are also tasked to edit the IT users authorization policy so IT users who successfully authenticated will get the permission of the existing IT_Corp authorization profile.

Perform this simulation by accessing the ISE GUI to perform the following tasks:

u2022 Create a new identity source sequence named AD_internal to first use the Microsoft Active Directory (AD1) then use the ISE Internal User database

u2022 Edit the existing Dot1X authentication policy to use the new AD_internal identity source sequence:

u2022 If authentication failed-reject the access request

u2022 If user is not found in AD-Drop the request without sending a response

u2022 If process failed-Drop the request without sending a response

u2022 Edit the IT users authorization policy so IT users who successfully authenticated will get the permission of the existing IT_Corp authorization profile.

To access the ISE GUI, click the ISE icon in the topology diagram. To verify your configurations, from the ISE GUI, you should also see the Authentication Succeeded event for the it1 user after you have successfully defined the DotlX authentication policy to use the Microsoft Active Directory first then use the ISE Internal User Database to authenticate the user. And in the Authentication Succeeded event, you should see the IT_Corp authorization profile being applied to the it1 user. If your configuration is not correct and ISE can't authenticate the user against the Microsoft Active Directory, you should see the Authentication Failed event instead for the it1 user.

Note: If you make a mistake in the Identity Source Sequence configuration, please delete the Identity Source Sequence then re-add a new one. The edit Identity Source Sequence function is not implemented in this simulation.

View Answer

Question No: 12

Refer to the exhibit.

Which statement describes this switch configuration?

A. 802.1x is disabled on the switch port and all traffic is allowed as normal without restriction.

B. The switch port begins in the unauthorized state and does not allow EAPOL, Cisco Discovery Protocol, and STP traffic.

C. The switch port begins in the unauthorized state and allows only EAPOL, Cisco Discovery Protocol, and

STP traffic.

D. 802.1x is enabled on the switch port and the switch port ignores all traffic.

View Answer

Question No: 13

Which profiling probe collects the user-agent string?

A. NetFlow

B. DHCP

C. Network Scan

D. HTTP

View Answer

Question No: 14

Which setting provides the best security for a WLAN and authenticates users against a centralized directory store?

A. WPA2 AES-CCMP and 801.X authentication

B. WPA2 AES-CCMP and PSK authentication

C. WPA2 TKIP and PSK authentication

D. WPA2 TKIP and 802.1X authentication

View Answer

Question No: 15

Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)

A. LLDP agent information

B. user agent

C. DHCP options

D. open ports

E. operating system

F. trunk ports

View Answer