[Free] 2019(Nov) EnsurePass Cisco 300-208 Dumps with VCE and PDF 71-80

November 2, 2019

300-208 Dumps 2019-11

, , ,

Get Full Version of the Exam
http://www.EnsurePass.com/300-208.html

Question No.71

Which port does Cisco ISE use for native supplicant provisioning of a Windows machine?

  1. TCP 8443

  2. TCP/UDP 8905

  3. TCP/UDP 8909

  4. TCP 443 Correct Answer: C Explanation:

8909: web, cisco nac agent, supplicant provisioning wizard installation 8905: Cisco NAC agent update

Question No.72

What user rights does an account need to join ISE to a Microsoft Active Directory domain?

  1. Create and Delete Computer Objects

  2. Domain Admin

  3. Join and Leave Domain

  4. Create and Delete User Objects

Correct Answer: A

Question No.73

Refer to the exhibit. Which three statements about the given configuration are true? (Choose three.)

image

  1. TACACS authentication configuration is complete.

  2. TACACS authentication configuration is incomplete.

  3. TACACS server hosts are configured correctly.

  4. TACACS server hosts are misconfigured.

  5. The TACACS server key is encrypted.

  6. The TACACS server key is unencrypted.

Correct Answer: BCF

Question No.74

Which protocol sends authentication and accounting in different requests?

  1. RADIUS

  2. TACACS

  3. EAP-Chaining

  4. PEAP

  5. EAP-TLS

Correct Answer: B

Question No.75

Refer to the exhibit. If a user with privilege 15 is matching this command set on Cisco ISE 2.0, which three commands can the user execute? (Choose three.)

image

  1. configure terminal

  2. show run

  3. show clock

D. ping 10.10.100.1

  1. exit

  2. show ip interface brief

Correct Answer: ABF

Question No.76

Which Cisco ISE 1.x protocol can be used to control admin access to network access devices?

  1. TACACS

  2. RADIUS

  3. EAP

  4. Kerberos

Correct Answer: B

Question No.77

Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.)

  1. Windows Active Directory

  2. LDAP

  3. RADIUS token server

  4. internal endpoint store

  5. internal user store

  6. certificate authentication profile

  7. RSA SecurID

Correct Answer: AE

Question No.78

Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?

  1. RADIUS Attribute (5) NAS-Port

  2. RADIUS Attribute (6) Service-Type

  3. RADIUS Attribute (7) Framed-Protocol

  4. RADIUS Attribute (61) NAS-Port-Type

Correct Answer: B

Question No.79

Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

  1. LLDP agent information

  2. user agent

  3. DHCP options

  4. open ports

  5. CDP agent information

  6. FQDN

Correct Answer: BC

Question No.80

A user is on a wired connection and the posture status is noncompliant. Which state will their EPS session be placed in?

  1. disconnected

  2. limited

  3. no access

  4. quarantined

Correct Answer: D

Get Full Version of the Exam
300-208 Dumps
300-208 VCE and PDF

Related Posts