Get all latest (August) Cisco 300-208 Actual Test 41-50

By | August 8, 2015

Ensurepass

 

QUESTION 41

In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose three.)

 

A.

configuration

B.

authentication

C.

sensing

D.

policy requirements

E.

monitoring

F.

repudiation

 

Correct Answer: ABD

 

 

QUESTION 42

In a split ACS deployment with primary and secondary servers, which three statements about AAA load handling are true? (Choose three.)

 

A.

During normal operations, each server processes the full workload of both servers.

B.

If a AAA connectivity problem occurs, the servers split the full load of authentication requests.

C.

If a AAA connectivity problem occurs, each server processes the full workload of both servers.

D.

During normal operations, the servers split the full load of authentication requests.

E.

During normal operations, each server is used for specific operations, such as device administration and network admission.

F.

The primary servers are used to distribute policy information to other servers in the enterprise.

 

Correct Answer: CDE

 

 

QUESTION 43

Which three personas can a Cisco ISE assume in a deployment? (Choose three.)

 

A.

connection

B.

authentication

C.

administration

D.

testing

E.

policy service

F.

monitoring

 

Correct Answer: CEF

 

 

QUESTION 44

Which three components comprise the Cisco ISE profiler? (Choose three.)

 

A.

the sensor, which contains one or more probes

B.

the probe manager

C.

a monitoring tool that connects to the Cisco ISE

D.

the trigger, which activates ACLs

E.

an analyzer, which uses configured policies to evaluate endpoints

F.

a remitter tool, which fails over to redundant profilers

 

Correct Answer: ABE

 

 

QUESTION 45

Which three statements about the Cisco ISE profiler are true? (Choose three.)

 

A.

It sends endpoint data to AAA servers.

B.

It collects endpoint attributes.

C.

It stores MAC addresses for endpoint systems.

D.

It monitors and polices router and firewall traffic.

E.

It matches endpoints to their profiles.

F.

It stores endpoints in the Cisco ISE database with their profiles.

 

Correct Answer: BEF

 

 

QUESTION 46

From which location can you run reports on endpoint profiling?

 

A.

Reports > Operations > Catalog > Endpoint

B.

Operations > Reports > Catalog > Endpoint

C.

Operations > Catalog > Reports > Endpoint

D.

Operations > Catalog > Endpoint

 

Correct Answer: B

 

 

QUESTION 47

Which two services are included in the Cisco ISE posture service? (Choose two.)

 

A.

posture administration

B.

posture run-time

C.

posture monitoring

D.

posture policing

E.

posture catalog

 

Correct Answer: AB

 

 

QUESTION 48

What is a requirement for posture administration services in Cisco ISE?

 

A.

at least one Cisco router to store Cisco ISE profiling policies

B.

Cisco NAC Agents that communicate with the Cisco ISE server

C.

an ACL that points traffic to the Cisco ISE deployment

D.

the advanced license package must be installed

 

Correct Answer: D

 

 

QUESTION 49

Which two statements about Cisco NAC Agents that are installed on clients that interact with the Cisco ISE profiler are true? (Choose two.)

 

A.

They send endpoint data to AAA servers.

B.

They collect endpoint attributes.

C.

They interact with the posture service to enforce endpoint security policies.

D.

They block access from the network through noncompliant endpoints.

E.

They store endpoints in the Cisco ISE with their profiles.

F.

They evaluate clients against posture policies, to enforce requirements.

 

Correct Answer: CF

 

 

QUESTION 50

What steps must you perform to deploy a CA-signed identify certificate on an ISE device?

 

A.

1. Download the CA server certificate.

2. Generate a signing request and save it as a file.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the ISE.

B.

1. Download the CA server certificate.

2. Generate a signing request and save it as a file.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the CA server.

C.

1. Generate a signing request and save it as a file.

2. Download the CA server certificate.

3. Access the ISE server and submit the CA request.

4. Install the issued certificate on the CA server.

D.

1. Generate a signing request and save it as a file.

2. Download the CA server certificate.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the ISE.

 

Correct Answer: D

 

Free VCE & PDF File for Cisco 300-208 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …