300-208 exam

The corporate security policy requires multiple elements to be matched in an authorization policy. Which elements can be combined to meet the requirement?A . Device registration status and device activation statusB . Network access device and time conditionC . User credentials and server certificateD . Built-in profile and custom profileView...

Which advanced authentication setting is needed to allow an unknown device to utilize Central WebAuth?A . If Authentication failed > ContinueB . If Authentication failed > DropC . If user not found > ContinueD . If user not found > RejectView AnswerAnswer: C

What is the default posture status for non-agent capable devices, such as Linux and iDevices?A . UnknownB . ValidatedC . DefaultD . CompliantView AnswerAnswer: D

Which technology performs CoA support Posture Service?A . External root CAB . Cisco ACSC . Cisco ISED . Internal root CAView AnswerAnswer: C

What is the first step that occurs when provisioning a wired device in a BYOD scenario?A . The smart hub detects that the physically connected endpoint requires configuration and must use MAB to authenticate.B . The URL redirects to the Cisco ISE Guest Provisioning portal.C . Cisco ISE authenticates the...

What is a required step when you deploy dynamic VLAN and ACL assignments?A . Configure the VLAN assignment.B . Configure the ACL assignment.C . Configure Cisco IOS Software 802.1X authenticator authorization.D . Configure the Cisco IOS Software switch for ACL assignment.View AnswerAnswer: C

Which configuration must you perform on a switch to deploy Cisco ISE in low-impact mode?A . Configure an ingress port ACL on the switchport.B . Configure DHCP snooping globally.C . Configure IP-device tracking.D . Configure BPDU filtering.View AnswerAnswer: A

A properly configured Cisco ISE Policy Service node is not receiving any profile data from a Cisco switch that runs Device Sensor. Which option is the most likely reason for the failure?A . Syslog is configured for the Policy Administration Node.B . RADIUS Accounting is disabled.C . The SNMP community...

During client provisioning on a Mac OS X system, the client system fails to renew its IP address. Which change can you make to the agent profile to correct the problem?A . Enable the Agent IP Refresh feature.B . Enable the Enable VLAN Detect Without UI feature.C . Enable CRL...

Which three remediation actions are supported by the Web Agent for Windows? (Choose three.)A . Automatic RemediationB . Message textC . URL LinkD . File DistributionE . AV definition updateF . Launch ProgramView AnswerAnswer: B,C,D