Sign In
Home/Cisco/300-208/Free questions

300-208 — Free Practice Questions

10 free sample questions from a bank of 82, with the correct answers and explanations. No signup required — start practising right now.

1Which EAP method uses a modified version of the MS-CHAP authentication protocol?
  • EAP-POTP
  • EAP-TLS
  • LEAP
  • EAP-MD5
Answer: C
2Under which circumstance would an inline posture node be deployed?
  • When the NAD does not support CoA
  • When the NAD cannot support the number of connected endpoints
  • When a PSN is overloaded
  • To provide redundancy for a PSN
Answer: A
3Which Cisco ISE 1.x protocol can be used to control admin access to network access devices?
  • TACACS+
  • RADIUS
  • EAP
  • Kerberos
Answer: B
4Which identity store option allows you to modify the directory services that run on TCP/IP?
  • Lightweight Directory Access Protocol
  • RSA SecurID server
  • RADIUS
  • Active Directory
Answer: A
5Which two profile attributes can be collected by a Cisco Catalyst Switch that supports Device Sensor? (Choose two.)
  • LLDP agent information
  • user agent
  • DHCP options
  • open ports
  • operating system
  • trunk ports
Answer:
6Which protocol sends authentication and accounting in different requests?
  • RADIUS
  • TACACS+
  • EAP-Chaining
  • PEAP
  • EAP-TLS
Answer: B
7Which feature of Cisco ASA allows VPN users to be postured against Cisco ISE without requiring an inline posture node?
  • RADIUS Change of Authorization
  • device tracking
  • DHCP snooping
  • VLAN hopping
Answer: A
8Which functionality does the Cisco ISE self-provisioning flow provide?
  • It provides support for native supplicants, allowing users to connect devices directly to the network.
  • It provides the My Devices portal, allowing users to add devices to the network.
  • It provides support for users to install the Cisco NAC agent on enterprise devices.
  • It provides self-registration functionality to allow guest users to access the network.
Answer: A
9What is the function of the SGACL policy matrix on a Cisco TrustSec domain with SGT Assignment?
  • It determines which access policy to apply to the endpoint.
  • It determines which switches are trusted within the TrustSec domain.
  • It determines the path the SGT of the packet takes when entering the Cisco TrustSec domain.
  • It lists all servers that are permitted to participate in the TrustSec domain.
  • It lists all hosts that are permitted to participate in the TrustSec domain.
Answer: A
10Which three host modes support MACsec? (Choose three.)
  • multidomain authentication host mode
  • multihost mode
  • multi-MAC host mode
  • single-host mode
  • dual-host mode
  • multi-auth host mode
Answer:
Unlock all 82 questions · $9.99Practice these interactively

Want the full bank of 82 questions for 300-208? See all practice exams.