ExamDumpster

Free 300-208 sample questions

Real questions from the Security Implementing Cisco Secure Access Solutions (SISAS) practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 8 of 17 free sample questions.

Question 1Choose one

A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected? A.TACACS+B.RADIUSC.Windows Active DirectoryD.Generic LDAP

Question 2Choose one

An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups? A.member ofB.groupC.classD.person

Question 3Choose one

Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode? A.Granular ACLs applied prior to authenticationB.Per user dACLs applied after successful authenticationC.Only EAPoL traffic allowed prior to authenticationD.Adjustable 802.1X timers to enable successful authentication

Question 4Choose one

A network administrator must enable which protocol extension to utilize EAP-Chaining? A.EAP-FASTB.EAP-TLSC.MSCHAPv2D.PEAP

Question 5Choose one

In the command 'aaa authentication default group tacacs local', how is the word 'default' defined? A.Command setB.Group nameC.Method listD.Login type

Question 6Choose one

Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What is the most likely cause of the problem? A.EAP-TLS is not checked in the Allowed Protocols listB.Certificate authentication profile is not configured in the Identity StoreC.MS-CHAPv2-is not checked in the Allowed Protocols listD.Default rule denies all trafficE.Client root certificate is not included in the Certificate Store

Question 7Choose one

The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node? A.tcp/8905B.udp/8905C.http/80D.https/443

Question 8Choose 2

Which two conditions are valid when configuring ISE for posturing? (Choose two.) A.DictionaryB.member OfC.Profile statusD.FileE.Service

9 more free samples are waiting

Create a free account to unlock the whole 300-208 sample bank, or get full access to all 205 practice questions in the simulator.

Create account