Get all latest (August) Cisco 300-208 Actual Test 91-100

Ensurepass

 

QUESTION 91

Which RADIUS attribute is used primarily to differentiate an IEEE 802.1x request from a Cisco MAB request?

 

A.

RADIUS Attribute (5) NAS-Port

B.

RADIUS Attribute (6) Service-Type

C.

RADIUS Attribute (7) Framed-Protocol

D.

RADIUS Attribute (61) NAS-Port-Type

 

Correct Answer: B

 

 

QUESTION 92

Which authorization method is the Cisco best practice to allow endpoints access to the Apple App store or Google Play store with Cisco WLC software version 7.6 or newer?

 

A.

dACL

B.

DNS ACL

C.

DNS ACL defined in Cisco ISE

D.

redirect ACL

 

Correct Answer: B

 

 

QUESTION 93

Which time allowance is the minimum that can be configured for posture reassessment interval?

 

A.

5 minutes

B.

20 minutes

C.

60 minutes

D.

90 minutes

 

Correct Answer: C

 

 

 

 

 

QUESTION 94

Which advanced authentication setting is needed to allow an unknown device to utilize Central WebAuth?

 

A.

If Authentication failed > Continue

B.

If Authentication failed > Drop

C.

If user not found > Continue

D.

If user not found > Reject

 

Correct Answer: C

 

 

QUESTION 95

Which option restricts guests from connecting more than one device at a time?

 

A.

Guest Portal policy > Set Device registration portal limit

B.

Guest Portal Policy > Set Allow only one guest session per user

C.

My Devices Portal > Set Maximum number of devices to register

D.

Multi-Portal Policy > Guest users should be able to do device registration

 

Correct Answer: B

 

 

QUESTION 96

In Cisco ISE, which two actions can be taken based on matching a profiler policy? (Choose two).

 

A.

exception

B.

network scan (NMAP)

C.

delete endpoint

D.

automatically remediate

E.

create matching identity group

 

Correct Answer: AB

 

 

QUESTION 97

Which statement about the Cisco ISE BYOD feature is true?

 

A.

Use of SCEP/CA is optional.

B.

BYOD works only on wireless access.

C.

Cisco ISE needs to integrate with MDM to support BYOD.

D.

Only mobile endpoints are supported.

 

Correct Answer: A

 

 

QUESTION 98

What user rights does an account need to join ISE to a Microsoft Active Directory domain?

 

A.

Create and Delete Computer Objects

B.

Domain Admin

C.

Join and Leave Domain

D.

Create and Delete User Objects

 

Correct Answer: A

 

 

QUESTION 99

A network administrator must enable which protocol to utilize EAP-Chaining?

 

A.

EAP-FAST

B.

EAP-TLS

C.

MSCHAPv2

D.

PEAP

 

Correct Answer: A

 

 

QUESTION 100

The corporate security policy requires multiple elements to be matched in an authorization policy. Which elements can be combined to meet the requirement?

 

A.

Device registration status and device activation status

B.

Network access device and time condition

C.

User credentials and server certificate

D.

Built-in profile and custom profile

 

Correct Answer: B

 

Free VCE & PDF File for Cisco 300-208 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …