300-208 practice test

1. Question 1 · 1

   Which EAP method uses a modified version of the MS-CHAP authentication protocol?

   Choose one answer.

   • EAP-POTP
   • EAP-TLS
   • LEAP
   • EAP-MD5

2. Question 2 · 1

   Under which circumstance would an inline posture node be deployed?

   Choose one answer.

   • When the NAD does not support CoA
   • When the NAD cannot support the number of connected endpoints
   • When a PSN is overloaded
   • To provide redundancy for a PSN

3. Question 3 · 1

   Which Cisco ISE 1.x protocol can be used to control admin access to network access devices?

   Choose one answer.

   • TACACS+
   • RADIUS
   • EAP
   • Kerberos

4. Question 4 · 1

   Which identity store option allows you to modify the directory services that run on TCP/IP?

   Choose one answer.

   • Lightweight Directory Access Protocol
   • RSA SecurID server
   • RADIUS
   • Active Directory

5. Question 5 · 1

   Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)

   Choose all answers that apply.

   • LLDP agent information
   • user agent
   • DHCP options
   • open ports
   • operating system
   • trunk ports

6. Question 6 · 1

   Which protocol sends authentication and accounting in different requests?

   Choose one answer.

   • RADIUS
   • TACACS+
   • EAP-Chaining
   • PEAP
   • EAP-TLS

7. Question 7 · 1

   Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

   Choose one answer.

   • RADIUS Change of Authorization
   • device tracking
   • DHCP snooping
   • VLAN hopping

8. Question 8 · 1

   Which functionality does the Cisco ISE self-provisioning flow provide?

   Choose one answer.

   • It provides support for native supplicants, allowing users to connect devices directly to the network.
   • It provides the My Devices portal, allowing users to add devices to the network.
   • It provides support for users to install the Cisco NAC agent on enterprise devices.
   • It provides self-registration functionality to allow guest users to access the network.

9. Question 9 · 1

   What is the function of the SGACL policy matrix on a Cisco TrustSec domain with SGT Assignment?

   Choose one answer.

   • It determines which access policy to apply to the endpoint.
   • It determines which switches are trusted within the TrustSec domain.
   • It determines the path the SGT of the packet takes when entering the Cisco TrustSec domain.
   • It lists all servers that are permitted to participate in the TrustSec domain.
   • It lists all hosts that are permitted to participate in the TrustSec domain.

10. Question 10 · 1

    Which three host modes support MACsec? (Choose three.)

    Choose all answers that apply.

    • multidomain authentication host mode
    • multihost mode
    • multi-MAC host mode
    • single-host mode
    • dual-host mode
    • multi-auth host mode

11. Question 11 · 1

    When you select Centralized Web Auth in the ISE Authorization Profile, which two components host the web authentication portal? (Choose two.)

    Choose all answers that apply.

    • ISE
    • the WLC
    • the access point
    • the switch
    • the endpoints

12. Question 12 · 1

    What is the default posture status for non-agent capable devices, such as Linux and iDevices?

    Choose one answer.

    • Unknown
    • Validated
    • Default
    • Compliant

13. Question 13 · 1

    Which statement about a distributed Cisco ISE deployment is true?

    Choose one answer.

    • It can support up to two monitoring Cisco ISE nodes for high availability.
    • It can support up to three load-balanced Administration ISE nodes.
    • Policy Service ISE nodes can be configured in a redundant failover configuration.
    • The Active Directory servers of Cisco ISE can be configured in a load-balanced configuration.

14. Question 14 · 1

    Which three features should be enabled as best practices for MAB? (Choose three.)

    Choose all answers that apply.

    • MD5
    • IP source guard
    • DHCP snooping
    • storm control
    • DAI
    • URPF

15. Question 15 · 1

    Which components must be selected for a client provisioning policy to do a Posture check on the Cisco ISE?

    Choose one answer.

    • Configuration Wizard, Wizard Profile
    • Agent, Profile, Compliance Module
    • Operating System, Posture Requirements
    • Remediation Actions, Posture Requirements

Paid access to all 79 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.