Implementing Cisco Secure Access Solutions: 300-208 Exam
300-208 Questions & Answers
Exam Code: 300-208
Exam Name: Implementing Cisco Secure Access Solutions
Q & A: 93 Q&As
How frequently does the Profiled Endpoints dashlet refresh data?
A. every 30 seconds
B. every 60 seconds
C. every 2 minutes
D. every 5 minutes
Which command in the My Devices Portal can restore a previously lost device to the network?
What is the first step that occurs when provisioning a wired device in a BYOD scenario?
A. The smart hub detects that the physically connected endpoint requires configuration and must use
MAB to authenticate.
B. The URL redirects to the Cisco ISE Guest Provisioning portal.
C. Cisco ISE authenticates the user and deploys the SPW package.
D. The device user attempts to access a network URL.
Which three features should be enabled as best practices for MAB? (Choose three.)
B. IP source guard
C. DHCP snooping
D. storm control
When MAB is configured, how often are ports reauthenticated by default?
A. every 60 seconds
B. every 90 seconds
C. every 120 seconds
What is a required step when you deploy dynamic VLAN and ACL assignments?
A. Configure the VLAN assignment.
B. Configure the ACL assignment.
C. Configure Cisco IOS Software 802.1X authenticator authorization.
D. Configure the Cisco IOS Software switch for ACL assignment.
Which model does Cisco support in a RADIUS change of authorization implementation?
An organization has recently deployed ISE with the latest models of Cisco switches, and it plans
to deploy Trustsec to secure its infrastructure. The company also wants to allow different network
access policies for different user groups (e.g., administrators). Which solution is needed to
achieve these goals?
A. Cisco Security Group Access Policies in order to use SGACLs to control access based on SGTs
assigned to different users
B. MACsec in Multiple-Host Mode in order to open or close a portbased on a single authentication
C. Identity-based ACLs on the switches with user identities provided by ISE
D. Cisco Threat Defense for user group control by leveraging Netflow exported from the switches and
login information from ISE
Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose
Which administrative role has permission to assign Security Group Access Control Lists?
A. System Admin
B. Network Device Admin
C. Policy Admin
D. Identity Admin
Which set of commands allows IPX inbound on all interfaces?
A. ASA1(config)# access-list IPX-Allow ethertype permit ipx
ASA1(config)# access-group IPX-Allow in interface global
B. ASA1(config)# access-list IPX-Allow ethertype permit ipx
ASA1(config)# access-group IPX-Allow in interface inside
C. ASA1(config)# access-list IPX-Allow ethertype permit ipx
ASA1(config)# access-group IPX-Allow in interface outside
D. ASA1(config)# access-list IPX-Allow ethertype permit ipx
ASA1(config)# access-group IPX-Allow out interface global
Which command enables static PAT for TCP port 25?
A. nat (outside,inside) static 188.8.131.52 184.108.40.206 eq smtp
B. nat static 220.127.116.11 eq smtp
C. nat (inside,outside) static 18.104.22.168 service tcp smtp smtp
D. static (inside,outside) 22.214.171.124 126.96.36.199 netmask 255.255.255.255
Which command is useful when troubleshooting AAA Authentication between a Cisco router and
the AAA server?
A. test aaa-server test cisco cisco123 all new-code
B. test aaa group7 tacacs+ auth cisco123 new-code
C. test aaa group tacacs+ cisco cisco123 new-code
D. test aaa-server tacacs+ group7 cisco cisco123 new-code
…go to http://www.lead2pass.com/300-208.html to download the full version Q&As.