[Free] 2019(Nov) EnsurePass Cisco 300-208 Dumps with VCE and PDF 51-60

Get Full Version of the Exam
http://www.EnsurePass.com/300-208.html

Question No.51

What attribute could be obtained from the SNMP query probe?

  1. FQDN

  2. CDP

  3. DHCP class identifier

  4. User agent

Correct Answer: B

Question No.52

Which operating system type needs access to the Internet to download the application that is required for BYOD on-boarding?

  1. iOS

  2. OSX

  3. Android

  4. Windows

Correct Answer: C

Question No.53

Which set of commands allows IPX inbound on all interfaces?

  1. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface global

  2. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface inside

  3. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow in interface outside

  4. ASA1(config)# access-list IPX-Allow ethertype permit ipx ASA1(config)# access-group IPX-Allow out interface global

Correct Answer: A

Question No.54

In Cisco ISE 1.3, where is BYOD enabled with dual-SSID onboarding?

  1. client provisioning policy

  2. client provisioning resources

  3. BYOD portal

  4. guest portal

Correct Answer: D

Question No.55

Which two fields are characteristics of IEEE 802.1AE frame? (Choose two.)

  1. destination MAC address

  2. source MAC address

  3. 802.1AE header in EtherType

  4. security group tag in EtherType

  5. integrity check value

  6. CRC/FCS

Correct Answer: CE

Question No.56

Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?

  1. RADIUS Change of Authorization

  2. device tracking

  3. DHCP snooping

  4. VLAN hopping

Correct Answer: A

Question No.57

Which command on the switch ensures that the Service-Type attribute is sent with all RADIUS authentication request?

  1. radius-server attribute 8 include-in-access-req

  2. radius-server attribute 25 access-request include

  3. radius-server attribute 6 on-for-login-auth

  4. radius-server attribute 31 send nas-port-detail

Correct Answer: C

Question No.58

A network engineer is configuring HTTP based CWA on a switch. Which three configuration elements are required? (Choose three.)

  1. HTTP server enabled

  2. Radius authentication on the port with MAB

  3. Redirect access-list

  4. Redirect-URL

  5. HTTP secure server enabled

  6. Radius authentication on the port with 802.1x

  7. Pre-auth port based access-list

Correct Answer: ABC

Question No.59

An engineer has discovered that a NAD is already configured to send packets to the cisco ISE node running session services, which probe profile requires the simplest configuration?

  1. RADIUS

  2. DHCP

  3. SPAN

  4. NMAP

  5. HTTP

Correct Answer: A

Question No.60

A security administrator wants to profile endpoints and gain visibility into attempted authentications. Which 802.1x mode allows these actions?

  1. monitor mode

  2. high-security mode

  3. closed mode

  4. low-impact mode

Correct Answer: A

Explanation:

Monitor ModeMonitor Mode is a process, not just a command on a switch. The process is to enable authentication (with authentication open), see exactly which devices fail and which ones succeed, and correct the failed authentications before they cause any problems.

Get Full Version of the Exam
300-208 Dumps
300-208 VCE and PDF

Leave a Reply