Ensurepass.com : Ensure you pass the IT Exams
2018 Aug Cisco Official New Released 300-208
100% Free Download! 100% Pass Guaranteed!
Implementing Cisco Secure Access Solutions
Question No: 131
When RADIUS NAC and AAA Override are enabled for WLC on a Cisco ISE, which two statements about RADIUS NAC are true? (Choose two.)
-
It will return an access-accept and send the redirection URL for all users.
-
It establishes secure connectivity between the RADIUS server and the ISE.
-
It allows the ISE to send a CoA request that indicates when the user is authenticated.
-
It is used for posture assessment, so the ISE changes the user profile based on posture result.
-
It allows multiple users to authenticate at the same time.
Answer: C,D
Question No: 132
What are two client-side requirements of the NAC Agent and NAC Web Agent installation?
(Choose two.)
-
Administrator workstation rights
-
Active Directory Domain membership
-
Allowing of web browser activex installation
-
WSUS service running
Answer: A,C
Question No: 133
Which command would be used in order to maintain a single open connection between a network access device and a tacacs server?
-
tacacs-server host timeout
-
tacacs-server host single-connection
-
tacacs-server host lt;ip addressgt;
-
tacacs-server host lt;ip addressgt; single-connection
Answer: D
Question No: 134
A user configured a Cisco Identity Service Engine and switch to work with downloadable access list for wired dot1x users, though it is failing to work. Which command must be added to address the issue?
-
ip dhcp snooping
-
ip device tracking
-
dot1x pae authenticator
-
aaa authentication dot1x default group radius
Answer: B
Question No: 135
Which two identity databases are supported when PEAP-MSCHAPv2 is used as EAP type? (Choose two.)
-
Windows Active Directory
-
LDAP
-
RADIUS token server
-
internal endpoint store
-
internal user store
-
certificate authentication profile
-
RSA SecurID
Answer: A,E
Question No: 136
Which action must an administrator take after joining a Cisco ISE deployment to an Active Directory domain?
-
Choose an Active Directory user.
-
Configure the management IP address.
-
Configure replication.
-
Choose an Active Directory group.
Answer: D
Question No: 137
What steps must you perform to deploy a CA-signed identify certificate on an ISE device?
-
1. Download the CA server certificate.2. Generate a signing request and save it as a file.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the ISE.
-
1. Download the CA server certificate.2. Generate a signing request and save it as a file.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the CA server.
-
1. Generate a signing request and save it as a file.2. Download the CA server certificate.3. Access the ISE server and submit the CA request.4. Install the issued certificate on the CA server.
-
1. Generate a signing request and save it as a file.2. Download the CA server
certificate.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the ISE.
Answer: A
Question No: 138
Which technology performs CoA support Posture Service?
-
External root CA
-
Cisco ACS
-
Cisco ISE
-
Internal root CA
Answer: C
Question No: 139
A security engineer has configured a switch port in 802. 1X closed mode. Which protocol is allowed to pass through before a device is authenticated?
-
Bootps
-
HTTP
-
PXE
-
EAPoL
-
ARP
Answer: D
Question No: 140
When RADIUS NAC and AAA Override are enabled for a WLC on a Cisco ISE, which two statements about RADIUS NAC are true? (Choose two.)
-
It returns an access-accept and sends the redirection URL for all users.
-
It establishes secure connectivity between the RADIUS server and the Cisco ISE.
-
It allows the Cisco ISE to send a CoA request that indicates when the user is authenticated.
-
It is used for posture assessment, so the Cisco ISE changes the user profile based on posture result.
-
It allows multiple users to authenticate at the same time.
Answer: C,D
100% Ensurepass Free Download!
–300-208 PDF
100% Ensurepass Free Guaranteed!
–300-208 Dumps
EnsurePass | ExamCollection | Testking | |
---|---|---|---|
Lowest Price Guarantee | Yes | No | No |
Up-to-Dated | Yes | No | No |
Real Questions | Yes | No | No |
Explanation | Yes | No | No |
PDF VCE | Yes | No | No |
Free VCE Simulator | Yes | No | No |
Instant Download | Yes | No | No |