This page was exported from Lead2pass New Updated Exam Questions [ https://www.getfreevce.com ]

Export date:Sun Dec 22 12:31:22 2024 / +0000 GMT

___________________________________________________


Title: [PDF&amp;VCE] Lead2pass Provides Latest Exam 300-208 Dumps VCE For Free Downloading (121-140)

---------------------------------------------------


2016 October Cisco Official New Released 300-208 Dumps in Lead2pass.com! 100% Free Download! 100% Pass Guaranteed! Lead2pass 300-208 braindumps including the exam questions and the answer, completed by our senior IT lecturers and the Cisco product experts, include the current newest 300-208 exam questions.  Following questions and answers are all new published by Cisco Official Exam Center: http://www.lead2pass.com/300-208.html QUESTION 121 Which two are valid ISE posture conditions? (Choose two.) A.&nbsp;&nbsp;&nbsp; Dictionary B.&nbsp;&nbsp;&nbsp; memberOf C.&nbsp;&nbsp;&nbsp; Profile status D.&nbsp;&nbsp;&nbsp; File E.&nbsp;&nbsp;&nbsp; ServiceAnswer: DE QUESTION 122 A network engineer is configuring HTTP based CWA on a switch. Which three configuration elements are required? (Choose three.) A.&nbsp;&nbsp;&nbsp; HTTP server enabled B.&nbsp;&nbsp;&nbsp; Radius authentication on the port with MAB C.&nbsp;&nbsp;&nbsp; Redirect access-list D.&nbsp;&nbsp;&nbsp; Redirect-URL E.&nbsp;&nbsp;&nbsp; HTTP secure server enabled F.&nbsp;&nbsp;&nbsp; Radius authentication on the port with 802.1x G.&nbsp;&nbsp;&nbsp; Pre-auth port based access-list Answer: ABC QUESTION 123 Which three statements describe differences between TACACS+ and RADIUS? (Choose three.) A.&nbsp;&nbsp;&nbsp; RADIUS encrypts the entire packet, while TACACS+ encrypts only the password. B.&nbsp;&nbsp;&nbsp; TACACS+ encrypts the entire packet, while RADIUS encrypts only the password. C.&nbsp;&nbsp;&nbsp; RADIUS uses TCP, while TACACS+ uses UDP. D.&nbsp;&nbsp;&nbsp; TACACS+ uses TCP, while RADIUS uses UDP. E.&nbsp;&nbsp;&nbsp; RADIUS uses ports 1812 and 1813, while TACACS+ uses port 49. F.&nbsp;&nbsp;&nbsp; TACACS+ uses ports 1812 and 1813, while RADIUS uses port 49 Answer: BDE QUESTION 124 Which two identity store options allow you to authorize based on group membership? (Choose two). A.&nbsp;&nbsp;&nbsp; Lightweight Directory Access Protocol B.&nbsp;&nbsp;&nbsp; RSA SecurID server C.&nbsp;&nbsp;&nbsp; RADIUS D.&nbsp;&nbsp;&nbsp; Active Directory Answer: AD QUESTION 125 What attribute could be obtained from the SNMP query probe? A.&nbsp;&nbsp;&nbsp; FQDN B.&nbsp;&nbsp;&nbsp; CDP C.&nbsp;&nbsp;&nbsp; DHCP class identifier D.&nbsp;&nbsp;&nbsp; User agent Answer: B QUESTION 126 What is a required configuration step for an 802.1X capable switch to support dynamic VLAN and ACL assignments? A.&nbsp;&nbsp;&nbsp; Configure the VLAN assignment. B.&nbsp;&nbsp;&nbsp; Configure the ACL assignment. C.&nbsp;&nbsp;&nbsp; Configure 802.1X authenticator authorization. D.&nbsp;&nbsp;&nbsp; Configure port security on the switch port. Answer: C QUESTION 127 Which network component would issue the CoA? A.&nbsp;&nbsp;&nbsp; switch B.&nbsp;&nbsp;&nbsp; endpoint C.&nbsp;&nbsp;&nbsp; Admin Node D.&nbsp;&nbsp;&nbsp; Policy Service Node Answer: D QUESTION 128 What steps must you perform to deploy a CA-signed identity certificate on an ISE device? A.&nbsp;&nbsp;&nbsp; 1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CA request. 4. Install the issued certificate on the ISE. B.&nbsp;&nbsp;&nbsp; 1. Download the CA server certificate and install it on ISE. 2. Generate a signing request and save it as a file. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the CA server. C.&nbsp;&nbsp;&nbsp; 1. Generate a signing request and save it as a file. 2. Download the CA server certificate and install it on ISE. 3. Access the ISE server and submit the CA request. 4.Install the issued certificate on the CA server. D.&nbsp;&nbsp;&nbsp; 1. Generate a signing request and save it as a file. 2. Download the CA server certificate and install it on ISE. 3. Access the CA server and submit the CSR. 4. Install the issued certificate on the ISE. Answer: D QUESTION 129 An organization has recently deployed ISE with Trustsec capable Cisco switches and would like to allow differentiated network access based on user groups. Which solution is most suitable for achieving these goals? A.&nbsp;&nbsp;&nbsp; Cyber Threat Defense for user group control by leveraging Netflow exported from the Cisco switches and identity information from ISE B.&nbsp;&nbsp;&nbsp; MACsec in Multiple-Host Mode in order to encrypt traffic at each hop of the network infrastructure C.&nbsp;&nbsp;&nbsp; Identity-based ACLs preconfigured on the Cisco switches with user identities provided by ISE D.&nbsp;&nbsp;&nbsp; Cisco Security Group Access Policies to control access based on SGTs assigned to different user groups Answer: D QUESTION 130 Which three are required steps to enable SXP on a Cisco ASA? (Choose three). A.&nbsp;&nbsp;&nbsp; configure AAA authentication B.&nbsp;&nbsp;&nbsp; configure password C.&nbsp;&nbsp;&nbsp; issue the aaa authorization command aaa-server group command D.&nbsp;&nbsp;&nbsp; configure a peer E.&nbsp;&nbsp;&nbsp; configure TACACS F.&nbsp;&nbsp;&nbsp; issue the cts sxp enable command Answer: BDF QUESTION 131 Which three network access devices allow for static security group tag assignment? (Choose three.) A.&nbsp;&nbsp;&nbsp; intrusion prevention system B.&nbsp;&nbsp;&nbsp; access layer switch C.&nbsp;&nbsp;&nbsp; data center access switch D.&nbsp;&nbsp;&nbsp; load balancer E.&nbsp;&nbsp;&nbsp; VPN concentrator F.&nbsp;&nbsp;&nbsp; wireless LAN controller Answer: BCE QUESTION 132 Which option is required for inline security group tag propagation? A.&nbsp;&nbsp;&nbsp; Cisco Secure Access Control System B.&nbsp;&nbsp;&nbsp; hardware support C.&nbsp;&nbsp;&nbsp; Security Group Tag Exchange Protocol (SXP) v4 D.&nbsp;&nbsp;&nbsp; Cisco Identity Services Engine Answer: B QUESTION 133 Which two fields are characteristics of IEEE 802.1AE frame? (Choose two.) A.&nbsp;&nbsp;&nbsp; destination MAC address B.&nbsp;&nbsp;&nbsp; source MAC address C.&nbsp;&nbsp;&nbsp; 802.1AE header in EtherType D.&nbsp;&nbsp;&nbsp; security group tag in EtherType E.&nbsp;&nbsp;&nbsp; integrity check value F.&nbsp;&nbsp;&nbsp; CRC/FCS Answer: CE QUESTION 134 Which two options are valid for configuring IEEE 802.1AE MACSec between switches in a TrustSec network? (Choose two.) A.&nbsp;&nbsp;&nbsp; manually on links between supported switches B.&nbsp;&nbsp;&nbsp; in the Cisco Identity Services Engine C.&nbsp;&nbsp;&nbsp; in the global configuration of a TrustSec non-seed switch D.&nbsp;&nbsp;&nbsp; dynamically on links between supported switches E.&nbsp;&nbsp;&nbsp; in the Cisco Secure Access Control System F.&nbsp;&nbsp;&nbsp; in the global configuration of a TrustSec seed switch Answer: AD QUESTION 135 Which three pieces of information can be found in an authentication detail report? (Choose three.) A.&nbsp;&nbsp;&nbsp; DHCP vendor ID B.&nbsp;&nbsp;&nbsp; user agent string C.&nbsp;&nbsp;&nbsp; the authorization rule matched by the endpoint D.&nbsp;&nbsp;&nbsp; the EAP method the endpoint is using E.&nbsp;&nbsp;&nbsp; the RADIUS username being used F.&nbsp;&nbsp;&nbsp; failed posture requirement Answer: CDE QUESTION 136 Certain endpoints are missing DHCP profiling data. Which option describes what can be used to determine if DHCP requests from clients are reaching Cisco ISE? A.&nbsp;&nbsp;&nbsp; output of show interface gigabitEthernet 0 from the CLI B.&nbsp;&nbsp;&nbsp; output of debug logging all 7 from the CLI C.&nbsp;&nbsp;&nbsp; output of show logging application profiler.log from the CLI D.&nbsp;&nbsp;&nbsp; the TCP dump diagnostic tool through the GUI E.&nbsp;&nbsp;&nbsp; the posture troubleshooting diagnostic tool through the GUI  Answer: D QUESTION 137 Which debug command on a Cisco WLC shows the reason that a client session was terminated? A.&nbsp;&nbsp;&nbsp; debug dot11 state enable B.&nbsp;&nbsp;&nbsp; debug dot1x packet enable C.&nbsp;&nbsp;&nbsp; debug client mac addr D.&nbsp;&nbsp;&nbsp; debug dtls event enable E.&nbsp;&nbsp;&nbsp; debug ap enable cisco ap Answer: C QUESTION 138 Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.) A.&nbsp;&nbsp;&nbsp; Windows Active Directory B.&nbsp;&nbsp;&nbsp; LDAP C.&nbsp;&nbsp;&nbsp; RADIUS token server D.&nbsp;&nbsp;&nbsp; internal endpoint store E.&nbsp;&nbsp;&nbsp; internal user store F.&nbsp;&nbsp;&nbsp; certificate authentication profile G.&nbsp;&nbsp;&nbsp; RSA SecurID Answer: AE QUESTION 139 Which two Cisco Catalyst switch interface commands allow only a single voice device and a single data device to be connected to the IEEE 802.1X-enabled interface? (Choose two.) A.&nbsp;&nbsp;&nbsp; authentication host-mode single-host B.&nbsp;&nbsp;&nbsp; authentication host-mode multi-domain C.&nbsp;&nbsp;&nbsp; authentication host-mode multi-host D.&nbsp;&nbsp;&nbsp; authentication host-mode multi-auth Answer: AB QUESTION 140 What are two possible reasons why a scheduled nightly backup of ISE to a FTP repository would fail? (Choose two.) A.&nbsp;&nbsp;&nbsp; ISE attempted to write the backup to an invalid path on the FTP server. B.&nbsp;&nbsp;&nbsp; The ISE and FTP server clocks are out of sync. C.&nbsp;&nbsp;&nbsp; The username and password for the FTP server are invalid. D.&nbsp;&nbsp;&nbsp; The server key is invalid or misconfigured. E.&nbsp;&nbsp;&nbsp; TCP port 69 is disabled on the FTP server. Answer: AC  If you use Lead2pass braindump as your 300-208 exam prepare material, we guarantee your success in the first attempt. Lead2pass 300-208 dump provides you everything you will need to take your 300-208 Exam.  300-208 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDM1I1WlhIdHJZNjA 2016 Cisco 300-208 exam dumps (All 250 Q&amp;As) from Lead2pass: http://www.lead2pass.com/300-208.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2016-10-17 06:46:28

Post date GMT: 2016-10-17 06:46:28

Post modified date: 2016-10-17 06:46:28

Post modified date GMT: 2016-10-17 06:46:28



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com