Online Access Free 300-208 Practice Test

Where is dynamic SGT classification configured?

• A.NAD
• B.supplicant
• C.RADIUS proxy
• D.Cisco ISE

Which profiling probe collects the user-agent string?

• A.NetFlow
• B.Network Scan
• C.HTTP
• D.DHCP

Which option is the correct redirect-ACL for Wired-CWA, with 10.201.228.76 being the Cisco ISE IP address?

• A.ip acess-l ex ACL-WEBAUTH-REDIRECT deny udp any any eq domain
  deny ip any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443
• B.ip acess-l ex ACL-WEBAUTH-REDIRECT
  permit udp any any eq domain deny ip any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443
• C.ip acess-l ex ACL-WEBAUTH-REDIRECT
  deny udp any any eq domain
  permit tcp any host 10.201.228.76 eq 8443 deny ip any host 10.201.228.76 permit tcp any any eq 80 permit tcp any any eq 443
• D.ip acess-l ex ACL-WEBAUTH-REDIRECT permit udp any any eq domain
  permit ip any host 10.201.228.76 deny tcp any any eq 80
  permit tcp any any eq 443

Which two conditions are valid when configuring ISE for posturing? (Choose two.)

• A.memberOf
• B.Dictionary
• C.Service
• D.File
• E.Profile status

Which two switchport commands enable MAB and allow non-802.1X capable devices to immediately run through the MAB process? (Choose two.)

• A.authentication order mab dot1x
• B.mab
• C.dot1x timeout tx-period
• D.authentication order dot1x mab
• E.no authentication timer