[Free] 2017(Apr) Ensurepass Braindumps Cisco 300-208 Latest Dumps 31-40

Ensurepass
2017 April Cisco Official New Released 300-208 Q&As
100% Free Download! 100% Pass Guaranteed!
http://www.ensurepass.com/300-208.html

Implementing Cisco Secure Access Solutions (SISAS)

QUESTION 31

Which command in the My Devices Portal can restore a previously lost device to the network?

 

A.

Reset

B.

Found

C.

Reinstate

D.

Request

 

Correct Answer: C

 

 

QUESTION 32

A network administrator must enable which protocol extension to utilize EAP-Chaining?

 

A.

EAP-FAST

B.

EAP-TLS

C.

MSCHAPv2

D.

PEAP

 

Correct Answer: A

 

 

QUESTION 33

Which default identity source is used by the MyDevices_Portal_Sequence identity source sequence?

 

A.

internal users

B.

guest users

C.

Active Directory

D.

internal endpoints

E.

RADIUS servers

 

Correct Answer: A

 

 

QUESTION 34

Which description of the purpose of the Continue option in an authentication policy rule is true?

 

A.

It allows Cisco ISE to check the list of rules in an authentication policy until there is a match.

B.

It sends an authentication to the next subrule within the same authentication rule.

C.

It allows Cisco ISE to proceed to the authorization policy regardless of authentication pass/fail.

D.

It sends an authentication to the selected identity store.

E.

It causes Cisco ISE to ignore the NAD because NAD will treat the Cisco ISE server as dead.

 

Correct Answer: C

 

 

QUESTION 35

Which two statements about administrative access to the Cisco Secure ACS SE are true? (Choose two.)

 

A.

The Cisco Secure ACS SE supports command-line connections through a serial-port connection.

B.

For GUI access, an administrative GUI user must be created by using the add-guiadmin command.

C.

The Cisco Secure ACS SE supports command-line connections through an Ethernet interface.

D.

An ACL-based policy must be configured to allow administrative-user access.

E.

GUI access to the Cisco Secure ASC SE is not supported.

 

Correct Answer: BD

 

 

QUESTION 36

Which three network access devices allow for static security group tag assignment? (Choose three.)

 

A.

intrusion prevention system

B.

access layer switch

C.

data center access switch

D.

load balancer

E.

VPN concentrator

F.

wireless LAN controller

 

Correct Answer: BCE

 

 

QUESTION 37

You configured wired 802.1X with EAP-TLS on Windows machines. The ISE authentication detail report shows “EAP-TLS failed SSL/TLS handshake because of an unknown CA in the client certificates chain.” What is the most likely cause of this error?

 

A.

The ISE certificate store is missing a CA certificate.

B.

The Wireless LAN Controller is missing a CA certificate.

C.

The switch is missing a CA certificate.

D.

The Windows Active Directory server is missing a CA certificate.

< p class="MsoNormal" style="cursor: auto; margin: 0cm 0cm 0pt; line-height: normal; text-autospace: ; mso-layout-grid-align: none" align="left"> 

Correct Answer: A

 

 

QUESTION 38

Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

 

A.

LLDP agent information

B.

user agent

C.

DHCP options

D.

open ports

E.

CDP agent information

F.

FQDN

 

Correct Answer: BC

 

 

QUESTION 39

Which statement about system time and NTP server configuration with Cisco ISE is true?

 

A.

The system time and NTP server settings can be configured centrally on the Cisco ISE.

B.

The system time can be configured centrally on the Cisco ISE, but NTP server settings must be configured individually on each ISE node.

C.

NTP server settings can be configured centrally on the Cisco ISE, but the system time must be configured individually on each ISE node.

D.

The system time and NTP server settings must be configured individually on each ISE node.

 

Correct Answer: D

 

 

QUESTION 40

How many days does Cisco ISE wait before it purges a session from the active session list if no RADIUS Accounting STOP message is received?

 

A.

1

B.

5

C.

10

D.

15

 

Correct Answer: B

100% Free Download!
—Download Free Demo:300-208 Demo PDF
100% Pass Guaranteed!
Download 2017 Ensurepass 300-208 Full Exam PDF and VCE Q&As:267
—Get 10% off your purchase! Copy it:8GTC-8UIE-M1SC [2017.04.01-2017.04.30]

Ensurepass ExamCollection Testking
Lowest Price Guarantee Yes No No
Up-to-Dated Yes No No
Real Questions Yes No No
Explanation Yes No No
PDF + VCE Yes No No
Free VCE Simulator Yes No No
Instant Download Yes No No

2017 Ensurepass IT Certification PDF and VCE

HOT EXAM!
Proudly powered by WordPress   Premium Style Theme by www.gopiplus.com