Dumps4cert.com : Latest Dumps with PDF and VCE Files
2018 July Cisco Official New Released 300-208
100% Free Download! 100% Pass Guaranteed!

Implementing Cisco Secure Access Solutions

Question No: 181

What is the purpose of the Cisco ISE Guest Service Sponsor Portal?

1. It tracks and stores user activity while connected to the Cisco ISE.

2. It securely authenticates guest users for the Cisco ISE Guest Service.

3. It filters guest users from account holders to the Cisco ISE.

4. It creates and manages Guest User accounts.

Answer: D

Question No: 182

Which two components are required to connect to a WLAN network that is secured by EAP-TLS authentication? (Choose two.)

1. Kerberos authentication server

2. AAA/RADIUS server

3. PSKs

4. CA server

Answer: B,D

Question No: 183

Your guest-access wireless network is experiencing degraded performance and excessive latency due to user saturation. Which type of rate limiting can you implement on your network to correct the problem?

1. per-device

2. per-policy

3. per-access point

4. per-controller

5. per-application

Answer: A

Question No: 184

A network administrator has just added a front desk receptionist account to the Cisco ISE Guest Service sponsor group. Using the Cisco ISE Guest Sponsor Portal, which guest services can the receptionist provide?

1. Authenticate guest users to Cisco ISE.

2. Keep track of guest user activities.

3. Create and manage guest user accounts.

4. Configure authorization setting for guest users.

Answer: C

Question No: 185

Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

1. LLDP agent information

2. user agent

3. DHCP options

4. open ports

5. CDP agent information

6. FQDN

Answer: B,C

Question No: 186

The corporate security policy requires multiple elements to be matched in an authorization policy. Which elements can be combined to meet the requirement?

1. Device registration status and device activation status

2. Network access device and time condition

3. User credentials and server certificate

4. Built-in profile and custom profile

Answer: B

Question No: 187

In Cisco ISE 1.3, which feature is available to a sponsor in a sponsor group?

1. Help employees add and manage new devices by entering the MAC address for the device.

2. Restrict sponsors from viewing guest passwords.

3. Allow the user to download a native supplicant profile.

4. Reinstate or delete devices that were registered previously.

Answer: B

Question No: 188

Which interface-level command is needed to turn on dot1x authentication?

1. authentication pae authenticator

2. aaa server radius dynamic-author

3. authentication host-mode single-host

4. dot1x system-auth-control

Answer: C Explanation:

In order to enable 802.1x functionality, enter this command: Switch(config)# dot1x system-auth-control

Question No: 189

When you configure an endpoint profiling policy rule, which option describes the purpose of the minimum certainty factor?

1. It is compared to the total certainty metric of an individual endpoint to determine whether the endpoint can be trusted.

2. It is compared to the assigned certainty value of an individual endpoint in a device database to determine whether the endpoint can be trusted.

3. It is used to compare the policy condition to other active policies.

4. It is used to determine the likelihood that an endpoint is an active, trusted device on the network.

Answer: A

Question No: 190

Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode?

1. Granular ACLs applied prior to authentication

2. Per user dACLs applied after successful authentication

3. Only EAPoL traffic allowed prior to authentication

4. Adjustable 802.1X timers to enable successful authentication

Answer: C

100% Dumps4cert Free Download!
–Download Free Demo:300-208 Demo PDF
100% Dumps4cert Pass Guaranteed!
–300-208 Dumps

	Dumps4cert	ExamCollection	Testking
Lowest Price Guarantee	Yes	No	No
Up-to-Dated	Yes	No	No
Real Questions	Yes	No	No
Explanation	Yes	No	No
PDF VCE	Yes	No	No
Free VCE Simulator	Yes	No	No
Instant Download	Yes	No	No