Pass4sure offers free demo for cisco 300 208 exam. "Implementing Cisco Secure Access Solutions (SISAS)", also known as 300 208 sisas exam, is a Cisco Certification. This set of posts, Passing the Cisco ccnp security sisas 300 208 official cert guide pdf exam, will help you answer those questions. The 300 208 sisas Questions & Answers covers all the knowledge points of the real exam. 100% real Cisco 300 208 dumps exams and revised by experts!
Q31. Which three statements about the Cisco ISE profiler are true? (Choose three.)
A. It sends endpoint data to AAA servers.
B. It collects endpoint attributes.
C. It stores MAC addresses for endpoint systems.
D. It monitors and polices router and firewall traffic.
E. It matches endpoints to their profiles.
F. It stores endpoints in the Cisco ISE database with their profiles.
Answer: B,E,F
Q32. In an 802.1X authorization process, a network access device provides which three functions? (Choose three.)
A. Filters traffic prior to authentication
B. Passes credentials to authentication server
C. Enforces policy provided by authentication server
D. Hosts a central web authentication page
E. Confirms supplicant protocol compliance
F. Validates authentication credentials
Answer: A,B,C
Q33. Which feature must you configure on a switch to allow it to redirect wired endpoints to Cisco ISE?
A. the http secure-server command
B. RADIUS Attribute 29
C. the RADIUS VSA for accounting
D. the RADIUS VSA for URL-REDIRECT
Answer: A
Q34. In a basic ACS deployment consisting of two servers, for which three tasks is the primary server responsible? (Choose three.)
A. configuration
B. authentication
C. sensing
D. policy requirements
E. monitoring
F. repudiation
Answer: A,B,D
Q35. The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node?
A. tcp/8905
B. udp/8905
C. http/80
D. https/443
Answer: B
Q36. Which three personas can a Cisco ISE assume in a deployment? (Choose three.)
A. connection
B. authentication
C. administration
D. testing
E. policy service
F. monitoring
Answer: C,E,F
Q37. A user is on a wired connection and the posture status is noncompliant.
Which state will their EPS session be placed in?
A. disconnected
B. limited
C. no access
D. quarantined
Answer: D
Q38. Where must periodic re-authentication be configured to allow a client to come out of the quarantine state and become compliant?
A. on the switch port
B. on the router port
C. on the supplicant
D. on the controller
Answer: A
Q39. Your guest-access wireless network is experiencing degraded performance and excessive latency due to user saturation. Which type of rate limiting can you implement on your network to correct the problem?
A. per-device
B. per-policy
C. per-access point
D. per-controller
E. per-application
Answer: A
Q40. Which term describes a software application that seeks connectivity to the network via a network access device?
A. authenticator
B. server
C. supplicant
D. WLC
Answer: C