300-208無料問題集「Cisco Implementing Cisco Secure Access Solutions」

質問 1

Scenario:
Currently, many users are expehecing problems using their AnyConnect NAM supplicant to login to the network. The rr desktop support staff have already examined and vehfed the AnyConnect NAM configuration is correct.
In this simulation, you are tasked to examine the various ISE GUI screens to determine the ISE current configurations to help isolate the problems. Based on the current ISE configurations, you will need to answer three multiple choice questions.
To access the ISE GUI, click on the ISE icon in the topology diagram to access the ISE GUI.
Not all the ISE GUI screen are operational in this simulation and some of the ISE GUI operations have been reduced in this simulation.
Not all the links on each of the ISE GUI screen works, if some of the links are not working on a screen, click Home to go back to the Home page first. From the Home page, you can access all the required screens.
To view some larger GUI screens, use the simulation window scroll bars. Some of the larger GUI screens only shows partially but will include all information required to complete this simulation.

Which two of the following statements are correct? (Choose two.)

（A）The ISE internal endpoints database is used authenticate any users not in the Active Directory domain.

（B）The ISE internal user database has two accounts enabled: student and test that maps to the Employee user identity group.

（C）Guest_Portal_Sequence is a built-in identity source sequence.

（D）The ISE is not able to successfully connect to the hq-srv.secure-x. local AD server.

正解：A、C 解答を投票する

質問 2

Refer to the exhibit.

Which statement describes this switch configuration?

（A）802.1x is disabled on the switch port and all traffic is allowed as normal without restriction

（B）The switch port begins in the unauthorized state and does not allow EAPPOL, Cisco Discovery Protocol, and STP traffic.

（C）802.1x is enabled on the switch port and the switch port ignores all traffic

（D）The switch port begins in the unauthorized state and allows only EAPPOL, Cisco Discovery Protocol, and STP traffic.

正解：D 解答を投票する

質問 3

Refer to the exhibit.

Which two things must be verified if authentication is failing with this error message? (Choose two.)

（A）CA cert chain of Cisco ISE EAP certificate is installed on the trusted certs store of the client machine.

（B）Cisco ISE EAP identity certificate is valid.

（C）Cisco ISE server certificate is installed on the client.

（D）CA cert chain of the client certificate is installed on Cisco ISE.

（E）Cisco ISE HTTPS/admin certificate is valid.

正解：A、B 解答を投票する

質問 4

Which switch command would ensure that the Service-Type attribute is sent with all RADIUS authentication requests?

（A）radius-server attribute 25 access-request include

（B）radius-server attribute 6 on-for-login-auth

（C）radius-server attribute 8 include-in-access-req

（D）radius-server attribute 31 send nas-port-detail

正解：B 解答を投票する

質問 5

Which description of the purpose of the Continue option in an authentication policy rule is true?

（A）t sends an authentication to the selected identity store.

（B）It causes Cisco ISE to ignore the NAD because NAD will treat the Cisco ISE server as dead.

（C）It sends an authentication to the next subrule within the same authentication rule.

（D）It allows Cisco ISE to check the list of rules in an authentication policy until there is a match.

（E）It allows Cisco ISE to proceed to the authorization policy regardless of authentication pass/fail.

正解：E 解答を投票する

質問 6

Which two statements about MAB are true? (Choose two.)

（A）It requires a preexisting database of the MAC addresses of permitted devices.

（B）If MAB fails, the device is unable to fall back to another authentication method.

（C）It is unable to authenticate individual users.

（D）It is unable to link the IP and MAC addresses of a device.

（E）It is unable to control network access at the edge.

正解：A、C 解答を投票する

質問 7

Which action do you take to define the global authorization exception policy by using a Device Admin Policy Set?

（A）Define the policy by configuring a standard profile.

（B）Configure the policy by using Proxy Sequence mode.

（C）Define the policy for each group of devices.

（D）Configure a rule-based condition in a policy set.

正解：A 解答を投票する

質問 8

Which option describes the purpose of configuring Native Supplicant Profile on the Cisco ISE?

（A）It is used to register personal devices on the network.

（B）It provides posture assessments and remediation for devices that are attempting to gain access to the corporate network.

（C）It helps employees add and manage new devices by entering the MAC address for the device.

（D）It enforces the use of MSCHAPv2 or EAP-TLS for 802.1X authentication.

正解：A 解答を投票する

質問 9

What are three portals provided by PSN? (Choose three.)

（A）my device

（B）monitoring

（C）admin

（D）troubleshooting

（E）sponsor

（F）guest

正解：A、E、F 解答を投票する

質問 10

Which option is the correct format of username in MAB authentication?

（A）host/LSB67.cisco.com

（B）10:41:7F:46:9F:89

（C）CISCO\chris

（D）[email protected]

正解：B 解答を投票する

質問 11

Which Layer 2 security setting do you use for users who complete the on-boarding process in a dual SSID deployment?

（A）EAP-MD5

（B）EAP-TLS

（C）WPA2

（D）WPA+WPA2

正解：D 解答を投票する

質問 12

A wireless deployment must check guest device compliance before allowing access to the network. Which type of guest deployment is needed to allow the Client Provisioning portal?

（A）central web authentication

（B）hot-spot

（C）self-registered

（D）sponsored

正解：A 解答を投票する

質問 13

How long are sessions kept in the ISE Monitoring and Troubleshooting node if there is authentication but no accounting?

（A）1 day

（B）5 days

（C）5 hours

（D）1 hour

正解：D 解答を投票する

300-208 無料問題集「Cisco Implementing Cisco Secure Access Solutions」

弊社を連絡する

関連リンク

トップ試験