Get Full Version of the Exam
http://www.EnsurePass.com/300-208.html
Question No.71
Which port does Cisco ISE use for native supplicant provisioning of a Windows machine?
-
TCP 8443
-
TCP/UDP 8905
-
TCP/UDP 8909
-
TCP 443 Correct Answer: C Explanation:
8909: web, cisco nac agent, supplicant provisioning wizard installation 8905: Cisco NAC agent update
Question No.72
What user rights does an account need to join ISE to a Microsoft Active Directory domain?
-
Create and Delete Computer Objects
-
Domain Admin
-
Join and Leave Domain
-
Create and Delete User Objects
Correct Answer: A
Question No.73
Refer to the exhibit. Which three statements about the given configuration are true? (Choose three.)
-
TACACS authentication configuration is complete.
-
TACACS authentication configuration is incomplete.
-
TACACS server hosts are configured correctly.
-
TACACS server hosts are misconfigured.
-
The TACACS server key is encrypted.
-
The TACACS server key is unencrypted.
Correct Answer: BCF
Question No.74
Which protocol sends authentication and accounting in different requests?
-
RADIUS
-
TACACS
-
EAP-Chaining
-
PEAP
-
EAP-TLS
Correct Answer: B
Question No.75
Refer to the exhibit. If a user with privilege 15 is matching this command set on Cisco ISE 2.0, which three commands can the user execute? (Choose three.)
-
configure terminal
-
show run
-
show clock
D. ping 10.10.100.1
-
exit
-
show ip interface brief
Correct Answer: ABF
Question No.76
Which Cisco ISE 1.x protocol can be used to control admin access to network access devices?
-
TACACS
-
RADIUS
-
EAP
-
Kerberos
Correct Answer: B
Question No.77
Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.)
-
Windows Active Directory
-
LDAP
-
RADIUS token server
-
internal endpoint store
-
internal user store
-
certificate authentication profile
-
RSA SecurID
Correct Answer: AE
Question No.78
Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?
-
RADIUS Attribute (5) NAS-Port
-
RADIUS Attribute (6) Service-Type
-
RADIUS Attribute (7) Framed-Protocol
-
RADIUS Attribute (61) NAS-Port-Type
Correct Answer: B
Question No.79
Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)
-
LLDP agent information
-
user agent
-
DHCP options
-
open ports
-
CDP agent information
-
FQDN
Correct Answer: BC
Question No.80
A user is on a wired connection and the posture status is noncompliant. Which state will their EPS session be placed in?
-
disconnected
-
limited
-
no access
-
quarantined
Correct Answer: D
Get Full Version of the Exam
300-208 Dumps
300-208 VCE and PDF