Download Implementing Cisco Secure Access Solutions.selftesttraining.300-208.2019-10-24.1e.252q.vcex

Download Exam

File Info

Exam Implementing Cisco Secure Access Solutions
Number 300-208
File Name Implementing Cisco Secure Access Solutions.selftesttraining.300-208.2019-10-24.1e.252q.vcex
Size 3.34 Mb
Posted October 24, 2019
Downloads 129

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase
Coupon: EXAM_HUB

Discount: 20%

 
 



Demo Questions

Question 1
A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected?

  • A: TACACS+
  • B: RADIUS
  • C: Windows Active Directory
  • D: Generic LDAP



Question 2
An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?

  • A: member of
  • B: group
  • C: class
  • D: person



Question 3
Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode?

  • A: Granular ACLs applied prior to authentication
  • B: Per user dACLs applied after successful authentication
  • C: Only EAPoL traffic allowed prior to authentication
  • D: Adjustable 802.1X timers to enable successful authentication



Question 4
In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?

  • A: Command set
  • B: Group name
  • C: Method list
  • D: Login type



Question 5
The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node?

  • A: tcp/8905
  • B: udp/8905
  • C: http/80
  • D: https/443



Question 6
Which identity store option allows you to modify the directory services that run on TCP/IP?

  • A: Lightweight Directory Access Protocol
  • B: RSA SecurID server
  • C: RADIUS
  • D: Active Directory



Question 7
Scenario 
In this simulation, you are task to examine the various authentication events using the ISE GUI. For example, you should see events like Authentication succeeded, Authentication failed and etc… 
Based on the events information, you will need to answer four multiple choice questions. 
Instructions 
To access the ISE GUI, from the topology diagram, click on the ISE icon. 
In this simulation, only the GUI screens that are used to examine the events in ISE are functional, all the other GUI screens are not accessible. 
When examining an event details, once you open the event details screen, just close the event details screen to return to the previous screen. 
Use the simulation scroll bars to help view the whole screen output if needed. 
Some of the event details screen were too long to capture in one pic for this simulation, therefore, two screen shots were captured and then combined into one screen to make it fit. 
Some other screen shots are also only partially shown with the information required for you to answer the questions. 

  

  

Which four statements are correct regarding the event that occurred at 2014-05-07 00:19:07.004? (Choose four.)

  • A: The IT_Corp authorization profile were applied.
  • B: The it1 user was matched to the IT_Corp authorization policy.
  • C: The it1 user supplicant used the PEAP (EAP-MSCHAPv2) authentication method.
  • D: The it1 user was authenticated using MAB.
  • E: The it1 user was successfully authenticated against AD1 identity store.
  • F: The it1 user machine has been profiled as a Microsoft-Workstation.
  • G: The it1 user machine has passed all the posture assessment tests.



Question 8
Instructions 
In this simulation, you will need to answer three multiple choice questions by examining the current ISE configurations using the ISE GUI. 
To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI. 
Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation. 
Not all the links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens. 
To view some larger GUI screens, use the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation. 
Scenario 
Currently, many users are experiencing problems using their AnyConnect NAM supplicant to login to the network. The IT desktop support staff have already examined and verified the AnyConnect NAM configuration is correct. 
In this simulation, you will need to answer three multiple choice questions by examining the current ISE configurations using the ISE GUI. 
To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI.  
Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation. 
Not all the links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens. 
To view some larger GUI screens, use the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation. 

  

  

Which two statements are true? (Choose two.)

  • A: The ISE is not able to successfully connect to the hq-srv.secure-x.local AD server.
  • B: The ISE internal endpoints database is used authenticate any users not in the Active Directory domain.
  • C: The ISE internal user database has two accounts enabled: student and test that maps to the Employee user identity group.
  • D: Guest_Portal_Sequence is a built-in identity source sequence.



Question 9
How frequently does the Profiled Endpoints dashlet refresh data?

  • A: every 30 seconds
  • B: every 60 seconds
  • C: every 2 minutes
  • D: every 5 minutes



Question 10
Which three features should be enabled as best practices for MAB? (Choose three.)

  • A: MD5
  • B: IP source guard
  • C: DHCP snooping
  • D: storm control
  • E: DAI
  • F: URPF






CONNECT US


ProfExam
PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount..

Get Now!


HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files
ProfExam Screen



HOW TO OPEN VCE FILES

Use VCE Exam Simulator to open VCE files
Avanaset