Category: 300-208 Braindumps

300-208 Braindumps

Preparing Cisco 300-208 exam is not difficult now. You can prepare from Cisco Books or 300-208 dumps. Here we have mentioned some sample questions. You can use our free 300-208 study material notes for test preparation. Latest 300-208 study material available.

Implementing Cisco Secure Access Solutions

Exam Number 300-208 SISAS

CCNP Security

Duration: 90 minutes (65 - 75 questions)
Available Languages: English, Japanese


Register Pearson VUE


Review Exam Type Questions




300-208 Dumps

300-208 | What steps must you perform to deploy a CA-signed identify…

Question: 19

 

What steps must you perform to deploy a CA-signed identify certificate on an ISE device?

 

A. 1. Download the CA server certificate.

2. Generate a signing request and save it as a file.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the ISE.

 

B. 1. Download the CA server certificate.

2. Generate a signing request and save it as a file.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the CA server.

 

C. 1. Generate a signing request and save it as a file.

2. Download the CA server certificate.

3. Access the ISE server and submit the CA request.

4. Install the issued certificate on the CA server.

 

D. 1. Generate a signing request and save it as a file.

2. Download the CA server certificate.

3. Access the CA server and submit the ISE request.

4. Install the issued certificate on the ISE.

 

Answer: D

300-208 | Which two statements about Cisco NAC Agents that…

Question: 18

Which two statements about Cisco NAC Agents that are installed on clients that interact with the Cisco ISE profiler are true? (Choose two.)

A. They send endpoint data to AAA servers.
B. They collect endpoint attributes.
C. They interact with the posture service to enforce endpoint security policies.
D. They block access from the network through noncompliant endpoints.
E. They store endpoints in the Cisco ISE with their profiles.
F. They evaluate clients against posture policies, to enforce requirements.

Answer: C,F

300-208 | What is a requirement for posture administration services…

Question: 17

What is a requirement for posture administration services in Cisco ISE?

A. at least one Cisco router to store Cisco ISE profiling policies
B. Cisco NAC Agents that communicate with the Cisco ISE server
C. an ACL that points traffic to the Cisco ISE deployment
D. the advanced license package must be installed

Answer: D

300-208 | From which location can you run reports on endpoint…

Question: 15

From which location can you run reports on endpoint profiling?

A. Reports > Operations > Catalog > Endpoint
B. Operations > Reports > Catalog > Endpoint
C. Operations > Catalog > Reports > Endpoint
D. Operations > Catalog > Endpoint

Answer: B

300-208 | Which three statements about….

Question: 14

Which three statements about the Cisco ISE profiler are true? (Choose three.)

A. It sends endpoint data to AAA servers.
B. It collects endpoint attributes.
C. It stores MAC addresses for endpoint systems.
D. It monitors and polices router and firewall traffic.
E. It matches endpoints to their profiles.
F. It stores endpoints in the Cisco ISE database with their profiles.

Answer: B,E,F

300-208|Which three components comprise the Cisco ISE profiler?

Question: 45

Which three components comprise the Cisco ISE profiler? (Choose three.)

A. the sensor, which contains one or more probes
B. the probe manager
C. a monitoring tool that connects to the Cisco ISE
D. the trigger, which activates ACLs
E. an analyzer, which uses configured policies to evaluate endpoints
F. a remitter tool, which fails over to redundant profilers

Answer: A,B,E