[Free] 2017(Nov) Dumps4cert Testinsides Cisco 300-208 Dumps with VCE and PDF Download 91-100

Dumps4cert 2017 Nov Cisco Official New Released 300-208
100% Free Download! 100% Pass Guaranteed!
http://www.Dumps4cert.com/300-208.html

Implementing Cisco Secure Access Solutions

Question No: 91 CORRECT TEXT

The Secure-X company has recently successfully tested the 802.1X authentication

deployment using the Cisco Catalyst switch and the Cisco ISEv1.2 appliance. Currently, each employee desktop is connected to an 802.1X enabled switch port and is able to use the Cisco AnyConnect NAM 802.1Xsupplicantto log in and connect to the network.

Currently, a new testing requirement is to add a network printer to the Fa0/19 switch port and have it connect to the network. The network printer does not support 802.1X supplicant. The Fa0/19 switch port is now configured to use 802.1X authentication only.

To support this network printer, the Fa0/19 switch port configuration needs to be edited to enable the network printer to authenticate using its MAC address. The network printer should also be on VLAN 9.

Another network security engineer responsible for managing the Cisco ISE has already per-configured all the requirements on the Cisco ISE, including adding the network printer MAC address to the Cisco ISE endpoint database and etc…

Your task in the simulation is to access the Cisco Catalyst Switch console then use the CLI to:

  • Enable only the Cisco Catalyst Switch Fa0/19 switch port to authenticate the network printer using its MAC address and:

  • Ensure that MAC address authentication processing is not delayed until 802.1Xfails

  • Ensure that even if MAC address authentication passes, the switch will still perform 802.1X authentication if requested by a 802.1X supplicant

  • Use the required show command to verify the MAC address authentication on the Fa0/19 is successful

  • The switch enable password is Cisco

    For the purpose of the simulation, to test the network printer, assume the network printer will be unplugged then plugged back into the Fa0/19 switch port after you have finished the required configurations on the Fa0/19 switch port.

    Note: For this simulation, you will not need and do not have access to the ISE GUI To access the switch CLI, click the Switch icon in the topology diagram

    Dumps4Cert 2017 PDF and VCE

    Answer: Review the explanation for full configuration and solution.

    Explanation:

    Initial configuration for fa 0/19 that is already done:

    Dumps4Cert 2017 PDF and VCE

    AAA configuration has already been done for us. We need to configure mac address bypass on this port to achieve the goal stated in the question. To do this we simply need to add this command under the interface:

    mab

    Then do a shut/no shut on the interface. Verification:

    Dumps4Cert 2017 PDF and VCE

    Question No: 92

    Which two services are included in the Cisco ISE posture service? (Choose two.)

    1. posture administration

    2. posture run-time

    3. posture monitoring

    4. posture policing

    5. posture catalog

    Answer: A,B

    Question No: 93

    Which two attributes must match between two Cisco ASA devices to properly enable high availability? (Choose two.)

    1. model, interface configuration, and RAM

    2. major and minor software release

    3. tcp dead-peer detection protocol

    4. 802.1x authentication identity

    Answer: A,B

    Question No: 94

    Which identity store option allows you to modify the directory services that run on TCP/IP?

    1. Lightweight Directory Access Protocol

    2. RSA SecurID server

    3. RADIUS

    4. Active Directory

    Answer: A

    Question No: 95

    What steps must you perform to deploy a CA-signed identify certificate on an ISE device?

    1. 1. Download the CA server certificate.2. Generate a signing request and save it as a file.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the ISE.

    2. 1. Download the CA server certificate.2. Generate a signing request and save it as a file.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the CA server.

    3. 1. Generate a signing request and save it as a file.2. Download the CA server certificate.3. Access the ISE server and submit the CA request.4. Install the issued certificate on the CA server.

    4. 1. Generate a signing request and save it as a file.2. Download the CA server certificate.3. Access the CA server and submit the ISE request.4. Install the issued certificate on the ISE.

    Answer: A

    Question No: 96

    Which statement about the Cisco ISE BYOD feature is true?

    1. Use of SCEP/CA is optional.

    2. BYOD works only on wireless access.

    3. Cisco ISE needs to integrate with MDM to support BYOD.

    4. Only mobile endpoints are supported.

    Answer: A

    Question No: 97

    Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)

    1. LLDP agent information

    2. user agent

    3. DHCP options

    4. open ports

    5. operating system

    6. trunk ports

    Answer: A,C

    Question No: 98

    What is a feature of Cisco WLC and IPS synchronization?

    1. Cisco WLC populates the ACLs to prevent repeat intruder attacks.

    2. The IPS automatically send shuns to Cisco WLC for an active host block.

    3. Cisco WLC and IPS synchronization enables faster wireless access.

    4. IPS synchronization uses network access points to provide reliable monitoring.

    Answer: B

    Question No: 99

    A network administrator wants to use dynamic VLAN assignment from Cisco ISE. Which option must be configured on the switch to support this?

    1. AAA authentication

    2. VTP

    3. DTP

    4. AAA authorization

    Answer: D

    Question No: 100

    Which three posture states can be used for authorization rules? (Choose three.)

    1. unknown

    2. known

    3. noncompliant

    4. quarantined

    5. compliant

    6. no access

    7. limited

    Answer: A,C,E

    100% Free Download!
    Download Free Demo:300-208 Demo PDF
    100% Pass Guaranteed!
    Download 2017 Dumps4cert 300-208 Full Exam PDF and VCE

    Dumps4cert ExamCollection Testking
    Lowest Price Guarantee Yes No No
    Up-to-Dated Yes No No
    Real Questions Yes No No
    Explanation Yes No No
    PDF VCE Yes No No
    Free VCE Simulator Yes No No
    Instant Download Yes No No

    2017 Dumps4cert IT Certification PDF and VCE