Pass4Test의 Cisco 300-208 (Implementing Cisco Secure Access Solutions (SISAS)) 시험대비덤프는 Cisco 300-208 (Implementing Cisco Secure Access Solutions (SISAS)) 실제시험문제 출제경향을 충분히 연구하여 제작한 완벽한 결과물입니다.실제시험문제가 바뀌면 덤프를 제일 빠른 시일내에 업데이트하도록 하기에 한번 구매하시면 1년동안 항상 가장 최신의 Cisco 300-208 (Implementing Cisco Secure Access Solutions (SISAS)) 시험덤프자료를 제공받을수 있습니다.
NO.1 Which two conditions are valid when configuring ISE for posturing? (Choose
two.)
A. Dictionary
B. memberOf
C. Profile status
D. File
E.
Service
Answer: D,E
NO.2 A network administrator needs to implement a
service that enables granular control of IOS
commands that can be executed.
Which AAA authentication method should be selected?
A. TACACS+
B.
RADIUS
C. Windows Active Directory
D. Generic LDAP
Answer:
A
NO.3 Cisco 802.1X phasing enables flexible deployments through the use
of open, low-impact, and
closed modes. What is a unique characteristic of the
most secure mode?
A. Granular ACLs applied prior to authentication
B. Per
user dACLs applied after successful authentication
C. Only EAPoL traffic
allowed prior to authentication
D. Adjustable 802.1X timers to enable
successful authentication
Answer: C
NO.4 An administrator can leverage
which attribute to assign privileges based on Microsoft Active
Directory user
groups?
A. member of
B. group
C. class
D. person
Answer:
A
NO.5 Changes were made to the ISE server while troubleshooting, and now
all wireless certificate
authentications are failing. Logs indicate an EAP
failure. What is the most likely cause of the
problem?
A. EAP-TLS is not
checked in the Allowed Protocols list
B. Certificate authentication profile
is not configured in the Identity Store
C. MS-CHAPv2-is not checked in the
Allowed Protocols list
D. Default rule denies all traffic
E. Client root
certificate is not included in the Certificate Store
Answer: A
NO.6 A
network administrator must enable which protocol extension to utilize
EAP-Chaining?
A. EAP-FAST
B. EAP-TLS
C. MSCHAPv2
D. PEAP
Answer:
A
NO.7 In the command 'aaa authentication default group tacacs local',
how is the word 'default'
defined?
A. Command set
B. Group name
C.
Method list
D. Login type
Answer: C
NO.8 The NAC Agent uses which
port and protocol to send discovery packets to an ISE Policy
Service
Node?
A. tcp/ 8905
B. udp/ 8905
C. http/ 80
D. https/
443
Answer: B