Get all latest (August) Cisco 300-208 Actual Test 111-120

By | August 8, 2015

Ensurepass

 

 

QUESTION 111

In Cisco ISE, which probe must be enabled to collect profiling data using Device Sensor?

 

A.

RADIUS

B.

SNMPQuery

C.

SNMPTrap

D.

Network Scan

E.

Syslog

 

Correct Answer: A

 

 

QUESTION 112

Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)

 

A.

LLDP agent information

B.

user agent

C.

DHCP options

D.

open ports

E.

operating system

F.

trunk ports

 

Correct Answer: AC

 

 

QUESTION 113

Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

 

A.

LLDP agent information

B.

user agent

C.

DHCP options

D.

open ports

E.

CDP agent information

F.

FQDN

 

Correct Answer: BC

 

 

QUESTION 114

Which statement about Cisco ISE BYOD is true?

 

A.

Dual SSID allows EAP-TLS only when connecting to the secured SSID.

B.

Single SSID does not require endpoints to be registered.

C.

Dual SSID allows BYOD for guest users.

D.

Single SSID utilizes open SSID to accommodate different types of users.

E.

Single SSID allows PEAP-MSCHAPv2 for native supplicant provisioning.

 

Correct Answer: E

 

 

QUESTION 115

Which two types of client provisioning resources are used for BYOD implementations? (Choose two.)

 

A.

user agent

B.

Cisco NAC agent

C.

native supplicant profiles

D.

device sensor

E.

software provisioning wizards

 

Correct Answer: CE

 

 

QUESTION 116

Which protocol sends authentication and accounting in different requests?

 

A.

RADIUS

B.

TACACS+

C.

EAP-Chaining

D.

PEAP

E.

EAP-TLS

 

Correct Answer: B

 

 

QUESTION 117

You enabled the guest session limit feature on the Cisco ISE. However, end users report that the same guest can log in from multiple devices simultaneously. Which configuration is missing on the network access device?

 

A.

RADIUS authentication

B.

RADIUS accounting

C.

DHCP required

D.

AAA override

 

Correct Answer: B

 

 

QUESTION 118

A properly configured Cisco ISE Policy Service node is not receiving any profile data from a Cisco switch that runs Device Sensor. Which option is the most likely reason for the failure?

 

A.

Syslog is configured for the Policy Administration Node.

B.

RADIUS Accounting is disabled.

C.

The SNMP community strings are mismatched.

D.

RADIUS Authentication is misconfigured.

E.

The connected endpoints support CDP but not DHCP.

 

Correct Answer: B

 

 

 

 

QUESTION 119

DRAG DROP

clip_image002[4]

 

Correct Answer:

clip_image004[4]

 

 

QUESTION 120

Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What are the two possible causes of the problem? (Choose two.)

 

A.

EAP-TLS is not checked in the Allowed Protocols list

B.

Client certificate is not included in the Trusted Certificate Store

C.

MS-CHAPv2-is not checked in the Allowed Protocols list

D.

Default rule denies all traffic

E.

Certificate authentication profile is not configured in the Identity Store

 

Correct Answer: AE

 

Free VCE & PDF File for Cisco 300-208 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …