300-208無料問題集「Cisco Implementing Cisco Secure Access Solutions」

質問 1

A customer is concerned with the use of issued laptops even when devices are not on the corporate network.
Which agent continues to be operational even when the host is not on the Cisco ISE network?

（A）Cisco Custom Agent

（B）Cisco ISE Agent

（C）Cisco NAC Agent

（D）Cisco NAC Web Agent

正解：D 解答を投票する

質問 2

Drag and drop each guest user login screen from the left onto the correct description on the right.

正解：

質問 3

What is required to implement Monitor Mode in a wireless network?

（A）Monitor mode in a wireless network is not possible.

（B）Open authentication must be configured via Cisco WLC CLI.

（C）Cisco WLC should have this feature enabled inside the security properties for the WLAN.

（D）Wireless Monitor Mode policy should be enabled within Cisco ISE.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What was an early precursor to MAC Authentication Bypass?

（A）port security

（B）VMPS

（C）Spanning Tree

（D）VLAN access lists

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A security administrator must design posture remediation services for a company's Macintosh user base running posture agent. Which Cisco ISE remediation option can the engineer utilize to accomplish this task?

（A）AV remediation

（B）launch program remediation

（C）WSUS remediation

（D）file remediation

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

A security engineer must provision dynamic TrustSec classifications. Which two classification options must the engineer select to accomplish this task? (Choose two.)

（A）VLAN

（B）IP subnet

（C）802.1X

（D）MAB

（E）interface

正解：C、D 解答を投票する

質問 7

In an 802.1X authorization process, a network access device provides which three functions? (Choose three.)

（A）Hosts a central web authentication page

（B）Filters traffic prior to authentication

（C）Validates authentication credentials

（D）Passes credentials to authentication server

（E）Enforces policy provided by authentication server

（F）Confirms supplicant protocol compliance

正解：B、D、E 解答を投票する

質問 8

Which two statements about RADIUS are true? (Choose two.)

（A）It encrypts the payload.

（B）It uses UDP ports 1812 and 1813.

（C）It uses TCP ports 1812 and 1813.

（D）It separates authorization and authentication functions.

（E）It encrypts the password only.

正解：B、E 解答を投票する

質問 9

Which two personas can a Cisco ISE node assume in a distributed deployment? (Choose two.)

（A）monitoring

（B）PxGrid service

（C）policy service

（D）high availability

（E）replication

正解：A、C 解答を投票する

質問 10

A new consultant must be granted network access for only six months. Which type of ISE default guest account must be used to allow this access?

（A）annual

（B）temporary

（C）contractor

（D）employee

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 11

A security administrator wants to profile endpoints and gain visibility into attempted authentications.
Which 802.1x mode allows these actions?

（A）closed mode

（B）monitor mode

（C）low-impact mode

（D）high-security mode

正解：B 解答を投票する

質問 12

You must recover a wireless client from quarantine. You disconnect the client from the network. Which action do you take next?

（A）Turn off the NIC of the client.

（B）Reboot the client machine after the idle timeout period expires.

（C）Reconnect to the network after the idle timeout period expires.

（D）Start a manual reassessment.

正解：C 解答を投票する

質問 13

A company has implemented a dual SSID BYOD design. A provisioning SSID is used for user registration, and an employee SSID is used for company network access. How is the layer 2 security of the provisioning SSID configured?

（A）802.1X

（B）open

（C）WPA2

（D）MAC filtering disabled

正解：B 解答を投票する

質問 14

Which two types of client provisioning resources are used for BYOD implementations? (Choose two.)

（A）software provisioning wizards

（B）user agent

（C）device sensor

（D）native supplicant profiles

（E）Cisco NAC agent

正解：A、D 解答を投票する

質問 15

Which client interface or interfaces are provisioned when the Cisco ISE performs supplicant provisioning?

（A）wired interface

（B）wireless and wired interfaces

（C）active interfaces

（D）wireless interface

正解：B 解答を投票する

質問 16

Which two values are compared by the binary comparison function in authentication that is based on Active Directory?

（A）subject alternative name and the common name

（B）user-presented certificate and a certificate stored in Active Directory

（C）user-presented password hash and a hash stored in Active Directory

（D）MS-CHAPv2 provided machine credentials and credentials stored in Active Directory

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 17

Which three options can be pushed from Cisco ISE server as part of a successful 802.1X authentication?
(Choose three)

（A）VLAN

（B）authentication order

（C）reauthentication timer

（D）DACL

（E）authentication priority

（F）posture status

正解：A、C、D 解答を投票する

質問 18

When you configure a Cisco WLC, which task must you perform to enable central web authentication?

（A）Set the NAC State option to None.

（B）Set the Layer 2 ACL option to None.

（C）Set the NAC State option to RADIUS NAC.

（D）Set the NAC State option to SNMP NAC.

正解：C 解答を投票する

質問 19

Which two profile attributes can be collected by a Cisco Wireless LAN Controller that supports Device Sensor? (Choose two.)

（A）open ports

（B）DHCP client ID

（C）user agent

（D）LLDP agent information

（E）CDP agent information

正解：B、C 解答を投票する

300-208 無料問題集「Cisco Implementing Cisco Secure Access Solutions」

弊社を連絡する

関連リンク

トップ試験