300-208 Exam - Implementing Cisco Secure Access Solutions (SISAS)

certleader.com

Q1. Which condition triggers wireless authentication? A. NAS-Port-Type is set to IEEE 802.11. 

B. Framed-Compression is set to None. 

C. Service-Type is set to Framed. 

D. Tunnel-Type is set to VLAN. 

Answer:

Q2. Which two switchport commands enable MAB and allow non-802.1X capable devices to immediately run through the MAB process? (Choose two.) 

A. authentication order mab dot1x 

B. authentication order dot1x mab 

C. no authentication timer 

D. dot1x timeout tx-period 

E. authentication open 

F. mab 

Answer: A,F 

Q3. The corporate security policy requires multiple elements to be matched in an authorization policy. Which elements can be combined to meet the requirement? 

A. Device registration status and device activation status 

B. Network access device and time condition 

C. User credentials and server certificate 

D. Built-in profile and custom profile 

Answer:

Q4. Which debug command on a Cisco WLC shows the reason that a client session was terminated? 

A. debug dot11 state enable 

B. debug dot1x packet enable 

C. debug client mac addr 

D. debug dtls event enable 

E. debug ap enable cisco ap 

Answer:

Q5. Which method does Cisco prefer to securely deploy guest wireless access in a BYOD implementation? 

A. deploying a dedicated Wireless LAN Controller in a DMZ 

B. configuring a guest SSID with WPA2 Enterprise authentication 

C. configuring guest wireless users to obtain DHCP centrally from the corporate DHCP server 

D. disabling guest SSID broadcasting 

Answer:

Q6. Which five portals are provided by PSN? (Choose five.) 

A. guest 

B. sponsor 

C. my devices 

D. blacklist 

E. client provisioning 

F. admin 

G. monitoring and troubleshooting 

Answer: A,B,C,D,E 

Q7. What are two client-side requirements of the NAC Agent and NAC Web Agent installation? (Choose two.) 

A. Administrator workstation rights 

B. Active Directory Domain membership 

C. Allowing of web browser activex installation 

D. WSUS service running 

Answer: A,C 

Q8. In a multi-node ISE deployment, backups are not working on the MnT node. Which ISE CLI option would help mitigate this issue? 

A. repository 

B. ftp-url 

C. application-bundle 

D. collector 

Answer:

Q9. Which two are valid ISE posture conditions? (Choose two.) 

A. Dictionary 

B. memberOf 

C. Profile status 

D. File 

E. Service 

Answer: D,E 

Q10. What endpoint operating system provides native support for the SPW? 

A. Apple iOS 

B. Android OS 

C. Windows 8 

D. Mac OS X 

Answer: