Ensurepass

Implementing Cisco Secure Access Solutions (SISAS)

 

QUESTION 81

What are two client-side requirements of the NAC Agent and NAC Web Agent installation? (Choose two.)

 

A.

Administrator workstation rights

B.

Active Directory Domain membership

C.

Allowing of web browser activex installation

D.

WSUS service running

 

Correct Answer: AC

 

 

QUESTION 82

In AAA, what function does authentication perform?

 

A.

It identifies the actions that the user can perform on the device.

B.

It identifies the user who is trying to access a device.

C.

It identifies the actions that a user has previously taken.

D.

It identifies what the user can access.

 

Correct Answer: B

 

 

 

QUESTION 83

Which configuration is required in the Cisco ISE Authentication policy to allow Central Web Authentication?

 

A.

Dot1x and if authentication failed continue

B.

MAB and if user not found continue

C.

MAB and if authentication failed continue

D.

Dot1x and if user not found continue

 

Correct Answer: B

 

 

QUESTION 84

When MAB is configured, how often are ports reauthenticated by default?

 

A.

every 60 seconds

B.

every 90 seconds

C.

every 120 seconds

D.

never

 

Correct Answer: D

 

 

QUESTION 85

Your guest-access wireless network is experiencing degraded performance and excessive latency due to user saturation. Which type of rate limiting can you implement on your network to correct the problem?

 

A.

per-device

B.

per-policy

C.

per-access point

D.

per-controller

E.

per-application

 

Correct Answer: A

 

 

QUESTION 86

In a Cisco ISE deployment, which traffic is permitted by the default dynamic ACL?

 

A.

all IP traffic

B.

management traffic only

C.

TCP traffic only

D.

UDP traffic only

 

Correct Answer: A

 

 

QUESTION 87

How frequently does the Profiled Endpoints dashlet refresh data?

 

A.

every 30 seconds

B.

every 60 seconds

C.

every 2 minutes

D.

every 5 minutes

 

Correct Answer: B

 

 

QUESTION 88

Under which circumstance would an inline posture node be deployed?

 

< /tr>

A.

When the NAD does not support CoA

B.

When the NAD cannot support the number of connected endpoints

C.

When a PSN is overloaded

D.

To provide redundancy for a PSN

 

Correct Answer: A

 

 

QUESTION 89

Which redirect-URL is pushed by Cisco ISE for posture redirect for corporate users?

 

A.

https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CC&portal=283258a0-e96e-11e4-a30a-005056bf01c9&action=cpp&token=a1a6ea71ea8f410c2637e11ba534379e

B.

https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CC&portal=283258a0-e96e-11e4-a30a-005056bf01c9&action=cwa&token=a1a6ea71ea8f410c2637e11ba534379e

C.

https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CC&portal=283258a0-e96e-11e4-a30a-005056bf01c9&action=mdm&token=a1a6ea71ea8f410c2637e11ba534379e

D.

https://ise1.cisco.com:8443/portal/gateway?sessionId=0A00023D0000003A239F78CC&portal=283258a0-e96e-11e4-a30a-005056bf01c9&action=drw&token=a1a6ea71ea8f410c2637e11ba534379e

 

Correct Answer: A

 

 

QUESTION 90

Security Group Access requires which three syslog messages to be sent to Cisco ISE? (Choose three.)

 

A.

IOS-7-PROXY_DROP

B.

AP-1-AUTH_PROXY_DOS_ATTACK

C.

MKA-2-MACDROP

D.

AUTHMGR-5-MACMOVE

E.

ASA-6-CONNECT_BUILT

F.

AP-1-AUTH_PROXY_FALLBACK_REQ

 

Correct Answer: BDF

 

Free VCE & PDF File for Cisco 300-208 Practice Test

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …