Introducing The New!
Surepassexam Collection
Get Unlimited Access to all
Surepassexam's PREMIUM files
P.S. Verified 300-208 braindump are available on Google Drive, GET MORE: https://drive.google.com/open?id=1JgMMGZemfjZpkIcsxrJP-8UJhYUjHYco
New Questions 12
Which three host modes support MACsec? (Choose three.)
A. multidomain authentication host mode
B. multihost mode
C. multi-MAC host mode
D. single-host mode
E. dual-host mode
F. multi-auth host mode
Answer: A,B,D
New Questions 13
What are two actions that can occur when an 802.1X-enabled port enters violation mode? (Choose two.)
A. The port is error disabled.
B. The port drops packets from any new device that sends traffic to the port.
C. The port generates a port resistance error.
D. The port attempts to repair the violation.
E. The port is placed in quarantine state.
F. The port is prevented from authenticating indefinitely.
Answer: A,B
New Questions 14
A security administrator wants to profile endpoints and gain visibility into attempted authentications. Which 802.1x mode allows these actions?
A. monitor mode
B. high-security mode
C. closed mode
D. low-impact mode
Answer: A
Explanation: Monitor ModeMonitor Mode is a process, not just a command on a switch. The process is to enable authentication (with authentication open), see exactly which devices fail and which ones succeed, and correct the failed authentications before they cause any problems.
New Questions 15
When using endpoint access control, which two access methods are valid for authentication and authorization?
(Choose two.)
A. Microsoft Challenge Handshake Authentication
B. Protected extensible authentication
C. MAC Authentication Bypass
D. Password Authentication Protocol Bypass
E. Web authentication
Answer: C,E
New Questions 16
During client provisioning on a Mac OS X system, the client system fails to renew its IP address. Which change can you make to the agent profile to correct the problem?
A. Enable the Agent IP Refresh feature.
B. Enable the Enable VLAN Detect Without UI feature.
C. Enable CRL checking.
D. Edit the Discovery Host parameter to use an IP address instead of an FQDN.
Answer: A
New Questions 17
Which two Active Directory authentication methods are supported by Cisco ISE? (Choose two.)
A. MS-CHAPv2
B. PEAP
C. PPTP
D. EAP-PEAP
E. PPP
Answer: A,B
New Questions 18
Which two statements about administrative access to the ACS Solution Engine are true? (Choose two.)
A. The ACS Solution Engine supports command-line connections through a serial-port connection.
B. For GUI access, an administrative GUI user must be created with the add-guiadmin command.
C. The ACS Solution Engine supports command-line connections through an Ethernet interface.
D. An ACL-based policy must be configured to allow administrative-user access.
E. GUI access to the ACS Solution Engine is not supported.
Answer: A,B
Explanation: who possess the proper administrative credentials. The CLI administrator does not have access to the ACS web GUI.
To create an initial GUI administrator account that allows web access to the ACS SE GUI, use the add-guiadmin command to create a GUI account.
add-guiadmin :
Adds a GUI account that allows access to the SE using the ACS web GUI.
New Questions 19
When you configure an endpoint profiling policy rule, which option describes the purpose of the minimum certainty factor?
A. It is compared to the total certainty metric of an individual endpoint to determine whether the endpoint can be trusted.
B. It is compared to the assigned certainty value of an individual endpoint in a device database to determine whether the endpoint can be trusted.
C. It is used to compare the policy condition to other active policies.
D. It is used to determine the likelihood that an endpoint is an active, trusted device on the network.
Answer: A
New Questions 20
Refer to the exhibit.
If the user matches the given TACACS+ profile on Cisco ISE, which command can the user enter from shell prompt on a Cisco switch?
A. enable
B. enable 10
C. show run
D. configure terminal
Answer: B
New Questions 21
What are three portals provided by PSN? (Choose three.)
A. Monitoring
B. Troubleshooting
C. Sponsor
D. Guest
E. My devices
F. Admin
Answer: C,D,E
Recommend!! Get the Verified 300-208 dumps in VCE and PDF From Dumpscollection, Welcome to download: http://www.dumpscollection.net/dumps/300-208/ (New 310 Q&As Version)