This page was exported from Latest Lead2pass Dumps For Sharing [ https://www.ensurepass.net ]

Export date:Wed Jan 22 10:44:48 2025 / +0000 GMT

___________________________________________________


Title: [2017 New] New Released Cisco 300-208 Exam Questions From Cisco Exam Center (51-75)

---------------------------------------------------


2017 July Cisco Official New Released 300-208 Dumps in Lead2pass.com!  100% Free Download! 100% Pass Guaranteed!  Good news, Lead2pass has updated the 300-208 exam dumps. With all the questions and answers in your hands, you will pass the Cisco 300-208 exam easily.  Following questions and answers are all new published by Cisco Official Exam Center: https://www.lead2pass.com/300-208.html  QUESTION 51Which two attributes must match between two Cisco ASA devices to properly enable high availability? (Choose two.) A.&nbsp;&nbsp;&nbsp; model, interface configuration, and RAMB.&nbsp;&nbsp;&nbsp; major and minor software releaseC.&nbsp;&nbsp;&nbsp; tcp dead-peer detection protocolD.&nbsp;&nbsp;&nbsp; 802.1x authentication identityAnswer: AB QUESTION 52What are two client-side requirements of the NAC Agent and NAC Web Agent installation? (Choose two.) A.&nbsp;&nbsp;&nbsp; Administrator workstation rightsB.&nbsp;&nbsp;&nbsp; Active Directory Domain membershipC.&nbsp;&nbsp;&nbsp; Allowing of web browser activex installationD.&nbsp;&nbsp;&nbsp; WSUS service running Answer: AC QUESTION 53Which three algorithms should be avoided due to security concerns? (Choose three.) A.&nbsp;&nbsp;&nbsp; DES for encryptionB.&nbsp;&nbsp;&nbsp; SHA-1 for hashingC.&nbsp;&nbsp;&nbsp; 1024-bit RSAD.&nbsp;&nbsp;&nbsp; AES GCM mode for encryptionE.&nbsp;&nbsp;&nbsp; HMAC-SHA-1F.&nbsp;&nbsp;&nbsp; 256-bit Elliptic Curve Diffie-HellmanG.&nbsp;&nbsp;&nbsp; 2048-bit Diffie-Hellman Answer: ABC QUESTION 54In the command 'aaa authentication default group tacacs local', how is the word 'default' defined? A.&nbsp;&nbsp;&nbsp; Command setB.&nbsp;&nbsp;&nbsp; Group nameC.&nbsp;&nbsp;&nbsp; Method listD.&nbsp;&nbsp;&nbsp; Login type Answer: C QUESTION 55Which statement about IOS accounting is true? A.&nbsp;&nbsp;&nbsp; A named list of AAA methods must be defined.B.&nbsp;&nbsp;&nbsp; A named list of accounting methods must be defined.C.&nbsp;&nbsp;&nbsp; Authorization must be configured before accounting.D.&nbsp;&nbsp;&nbsp; A named list of tracking methods must be defined. Answer: C QUESTION 56What are the initial steps to configure an ACS as a TACACS server? A.&nbsp;&nbsp;&nbsp; 1. Choose Network Devices and AAA Clients &gt; Network Resources.2. Click Create.B.&nbsp;&nbsp;&nbsp; 1. Choose Network Resources &gt; Network Devices and AAA Clients.2. Click Create.C.&nbsp;&nbsp;&nbsp; 1. Choose Network Resources &gt; Network Devices and AAA Clients.2. Click Manage.D.&nbsp;&nbsp;&nbsp; 1. Choose Network Devices and AAA Clients &gt; Network Resources.2. Click Install. Answer: B QUESTION 57Which effect does the ip http secure-server command have on a Cisco ISE? A.&nbsp;&nbsp;&nbsp; It enables the HTTP server for users to connect on the command line.B.&nbsp;&nbsp;&nbsp; It enables the HTTP server for users to connect by using web-based authentication.C.&nbsp;&nbsp;&nbsp; It enables the HTTPS server for users to connect by using web-based authentication.D.&nbsp;&nbsp;&nbsp; It enables the HTTPS server for users to connect on the command line. Answer: C QUESTION 58A network administrator needs to implement a service that enables granular control of IOS commands that can be executed. Which AAA authentication method should be selected? A.&nbsp;&nbsp;&nbsp; TACACS+B.&nbsp;&nbsp;&nbsp; RADIUSC.&nbsp;&nbsp;&nbsp; Windows Active DirectoryD.&nbsp;&nbsp;&nbsp; Generic LDAP Answer: A QUESTION 59An administrator can leverage which attribute to assign privileges based on Microsoft Active Directory user groups? A.&nbsp;&nbsp;&nbsp; member ofB.&nbsp;&nbsp;&nbsp; groupC.&nbsp;&nbsp;&nbsp; classD.&nbsp;&nbsp;&nbsp; person Answer: A QUESTION 60Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode? A.&nbsp;&nbsp;&nbsp; Granular ACLs applied prior to authenticationB.&nbsp;&nbsp;&nbsp; Per user dACLs applied after successful authenticationC.&nbsp;&nbsp;&nbsp; Only EAPoL traffic allowed prior to authenticationD.&nbsp;&nbsp;&nbsp; Adjustable 802.1X timers to enable successful authentication Answer: C QUESTION 61A network administrator must enable which protocol extension to utilize EAP-Chaining? A.&nbsp;&nbsp;&nbsp; EAP-FASTB.&nbsp;&nbsp;&nbsp; EAP-TLSC.&nbsp;&nbsp;&nbsp; MSCHAPv2D.&nbsp;&nbsp;&nbsp; PEAP Answer: A QUESTION 62In the command 'aaa authentication default group tacacs local', how is the word 'default' defined? A.&nbsp;&nbsp;&nbsp; Command setB.&nbsp;&nbsp;&nbsp; Group nameC.&nbsp;&nbsp;&nbsp; Method listD.&nbsp;&nbsp;&nbsp; Login type Answer: C QUESTION 63Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What is the most likely cause of the problem? A.&nbsp;&nbsp;&nbsp; EAP-TLS is not checked in the Allowed Protocols listB.&nbsp;&nbsp;&nbsp; Certificate authentication profile is not configured in the Identity StoreC.&nbsp;&nbsp;&nbsp; MS-CHAPv2-is not checked in the Allowed Protocols listD.&nbsp;&nbsp;&nbsp; Default rule denies all trafficE.&nbsp;&nbsp;&nbsp; Client root certificate is not included in the Certificate Store Answer: A QUESTION 64The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node? A.&nbsp;&nbsp;&nbsp; tcp/8905B.&nbsp;&nbsp;&nbsp; udp/8905C.&nbsp;&nbsp;&nbsp; http/80D.&nbsp;&nbsp;&nbsp; https/443 Answer: B QUESTION 65Which two conditions are valid when configuring ISE for posturing? (Choose two.) A.&nbsp;&nbsp;&nbsp; DictionaryB.&nbsp;&nbsp;&nbsp; memberOfC.&nbsp;&nbsp;&nbsp; Profile statusD.&nbsp;&nbsp;&nbsp; FileE.&nbsp;&nbsp;&nbsp; Service Answer: DE QUESTION 66Refer to the exhibit. Which three statements about the given configuration are true? (Choose three.) &nbsp; A.&nbsp;&nbsp;&nbsp; TACACS+ authentication configuration is complete.B.&nbsp;&nbsp;&nbsp; TACACS+ authentication configuration is incomplete.C.&nbsp;&nbsp;&nbsp; TACACS+ server hosts are configured correctly.D.&nbsp;&nbsp;&nbsp; TACACS+ server hosts are misconfigured.E.&nbsp;&nbsp;&nbsp; The TACACS+ server key is encrypted.F.&nbsp;&nbsp;&nbsp; The TACACS+ server key is unencrypted. Answer: BCF QUESTION 67In AAA, what function does authentication perform? A.&nbsp;&nbsp;&nbsp; It identifies the actions that the user can perform on the device.B.&nbsp;&nbsp;&nbsp; It identifies the user who is trying to access a device.C.&nbsp;&nbsp;&nbsp; It identifies the actions that a user has previously taken.D.&nbsp;&nbsp;&nbsp; It identifies what the user can access. Answer: B QUESTION 68Which identity store option allows you to modify the directory services that run on TCP/IP? A.&nbsp;&nbsp;&nbsp; Lightweight Directory Access ProtocolB.&nbsp;&nbsp;&nbsp; RSA SecurID serverC.&nbsp;&nbsp;&nbsp; RADIUSD.&nbsp;&nbsp;&nbsp; Active Directory Answer: A QUESTION 69Which term describes a software application that seeks connectivity to the network via a network access device? A.&nbsp;&nbsp;&nbsp; authenticatorB.&nbsp;&nbsp;&nbsp; serverC.&nbsp;&nbsp;&nbsp; supplicantD.&nbsp;&nbsp;&nbsp; WLC Answer: C QUESTION 70Cisco ISE distributed deployments support which three features? (Choose three.) A.&nbsp;&nbsp;&nbsp; global implementation of the profiler service CoAB.&nbsp;&nbsp;&nbsp; global implementation of the profiler service in Cisco ISEC.&nbsp;&nbsp;&nbsp; configuration to send system logs to the appropriate profiler nodeD.&nbsp;&nbsp;&nbsp; node-specific probe configurationE.&nbsp;&nbsp;&nbsp; server-specific probe configurationF.&nbsp;&nbsp;&nbsp; NetFlow probes Answer: ACD QUESTION 71An organization has recently deployed ISE with the latest models of Cisco switches, and it plans to deploy Trustsec to secure its infrastructure. The company also wants to allow different network access policies for different user groups (e.g., administrators). Which solution is needed to achieve these goals? A.&nbsp;&nbsp;&nbsp; Cisco Security Group Access Policies in order to use SGACLs to control access based on SGTs assigned to different usersB.&nbsp;&nbsp;&nbsp; MACsec in Multiple-Host Mode in order to open or close a portbased on a single authenticationC.&nbsp;&nbsp;&nbsp; Identity-based ACLs on the switches with user identities provided by ISED.&nbsp;&nbsp;&nbsp; Cisco Threat Defense for user group control by leveraging Netflow exported from the switches and login information from ISE Answer: A QUESTION 72Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose three.) A.&nbsp;&nbsp;&nbsp; IOS-7-PROXY_DROPB.&nbsp;&nbsp;&nbsp; AP-1-AUTH_PROXY_DOS_ATTACKC.&nbsp;&nbsp;&nbsp; MKA-2-MACDROPD.&nbsp;&nbsp;&nbsp; AUTHMGR-5-MACMOVEE.&nbsp;&nbsp;&nbsp; ASA-6-CONNECT_BUILTF.&nbsp;&nbsp;&nbsp; AP-1-AUTH_PROXY_FALLBACK_REQ Answer: BDF QUESTION 73Which Cisco IOS IPS feature allows to you remove one or more actions from all active signatures based on the attacker and/or target address criteria, as well as the event risk rating criteria? A.&nbsp;&nbsp;&nbsp; signature event action filtersB.&nbsp;&nbsp;&nbsp; signature event action overridesC.&nbsp;&nbsp;&nbsp; signature attack severity ratingD.&nbsp;&nbsp;&nbsp; signature event risk rating Answer: A QUESTION 74Which action does the command private-vlan association 100,200 take? A.&nbsp;&nbsp;&nbsp; configures VLANs 100 and 200 and associates them as a communityB.&nbsp;&nbsp;&nbsp; associates VLANs 100 and 200 with the primary VLANC.&nbsp;&nbsp;&nbsp; creates two private VLANs with the designation of VLAN 100 and VLAN 200D.&nbsp;&nbsp;&nbsp; assigns VLANs 100 and 200 as an association of private VLANs Answer: B QUESTION 75Which of these allows you to add event actions globally based on the risk rating of each event,without having to configure each signature individually? A.&nbsp;&nbsp;&nbsp; event action summarizationB.&nbsp;&nbsp;&nbsp; event action filterC.&nbsp;&nbsp;&nbsp; event action overrideD.&nbsp;&nbsp;&nbsp; signature event action processor Answer: C Once there are some changes on 300-208 exam questions, we will update the study materials timely to make sure that our customer can download the latest edition. 300-208 new questions on Google Drive: https://drive.google.com/open?id=0B3Syig5i8gpDM1I1WlhIdHJZNjA  2017 Cisco 300-208 exam dumps (All 300 Q&amp;As) from Lead2pass:  https://www.lead2pass.com/300-208.html [100% Exam Pass Guaranteed]

---------------------------------------------------


Images: 

---------------------------------------------------




---------------------------------------------------


Post date: 2017-07-12 08:36:48

Post date GMT: 2017-07-12 08:36:48

Post modified date: 2017-07-12 08:36:48

Post modified date GMT: 2017-07-12 08:36:48



____________________________________________________________________________________________


Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com