Download Implementing Cisco Secure Access Solutions.passcertification.300-208.2019-02-20.1e.384q.vcex

Download Exam

File Info

Exam Implementing Cisco Secure Access Solutions
Number 300-208
File Name Implementing Cisco Secure Access Solutions.passcertification.300-208.2019-02-20.1e.384q.vcex
Size 8.12 Mb
Posted February 20, 2019
Downloads 20
Download Implementing Cisco Secure Access Solutions.passcertification.300-208.2019-02-20.1e.384q.vcex

How to open VCEX & EXAM Files?

Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.

Purchase

Coupon: MASTEREXAM
With discount: 20%



 
 



Demo Questions

Question 1

A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected?

  • A: TACACS+
  • B: RADIUS
  • C: Windows Active Directory
  • D: Generic LDAP

Correct Answer: A




Question 2

An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups?

  • A: member of
  • B: group
  • C: class
  • D: person

Correct Answer: A




Question 3

Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode?

  • A: Granular ACLs applied prior to authentication
  • B: Per user dACLs applied after successful authentication
  • C: Only EAPoL traffic allowed prior to authentication
  • D: Adjustable 802.1X timers to enable successful authentication

Correct Answer: C




Question 4

A network administrator must enable which protocol extension to utilize EAP-Chaining?

  • A: EAP-FAST
  • B: EAP-TLS
  • C: MSCHAPv2
  • D: PEAP

Correct Answer: A




Question 5

In the command 'aaa authentication default group tacacs local', how is the word 'default' defined?

  • A: Command set
  • B: Group name
  • C: Method list
  • D: Login type

Correct Answer: C




Question 6

With Dual SSID, provision & employs, what L2 security should be used for provisioning the SSID?

  • A: 802.1x
  • B: Mac filter disable
  • C: Open
  • D: WPA2

Correct Answer: C




Question 7

The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node?

  • A: tcp/8905
  • B: udp/8905
  • C: http/80
  • D: https/443

Correct Answer: B




Question 8

Which two conditions are valid when configuring ISE for posturing? (Choose two.)

  • A: Dictionary
  • B: member Of
  • C: Profile status
  • D: File
  • E: Service

Correct Answer: DE




Question 9

Refer to the exhibit. 

  

Which three statements about the given configuration are true? (Choose three.)

  • A: TACACS+ authentication configuration is complete.
  • B: TACACS+ authentication configuration is incomplete.
  • C: TACACS+ server hosts are configured correctly.
  • D: TACACS+ server hosts are misconfigured.
  • E: The TACACS+ server key is encrypted.
  • F: The TACACS+ server key is unencrypted.

Correct Answer: BCF




Question 10

In AAA, what function does authentication perform?

  • A: It identifies the actions that the user can perform on the device.
  • B: It identifies the user who is trying to access a device.
  • C: It identifies the actions that a user has previously taken.
  • D: It identifies what the user can access.

Correct Answer: B










CONNECT US

Facebook

Twitter

PROFEXAM WITH A 20% DISCOUNT

You can buy ProfExam with a 20% discount!



HOW TO OPEN VCEX AND EXAM FILES

Use ProfExam Simulator to open VCEX and EXAM files