Free Cisco 300-208 Exam Dumps Questions & Answers

What type of identity group is the Blacklist identity group

• A.quarantine
• B.blackhole
• C.denied systems
• D.endpoint
• E.user

Which command configures console port authorization under line con 0?

• A.authorization exec default|WORD
• B.authorization default|WORD
• C.authorization line con 0|WORD
• D.authorization exec line con 0|WORD

Which description of the purpose of the Continue option in an authentication policy rule is true?

• A.It allows Cisco ISE to proceed to the authorization policy regardless of authentication pass/fail.
• B.t sends an authentication to the selected identity store.
• C.It sends an authentication to the next subrule within the same authentication rule.
• D.It allows Cisco ISE to check the list of rules in an authentication policy until there is a match.
• E.It causes Cisco ISE to ignore the NAD because NAD will treat the Cisco ISE server as dead.

An engineer must limit the configuration parameters that can be executed on the Cisco ASAs deployed throughout the network. Which command allows the engineer to complete this task?

• A.aaa-server tacacs1 (inside) host 10.5.109.18
  $2cr37 timeout 2
  !
  aaa authentication ssh console tacacs1
• B.aaa-server tacacs1 (inside) host 10.5.109.18
  $2cr37 timeout 2
  !
  aaa authentication command tacacs1
• C.aaa-server tacacs1 (inside) host 10.5.109.18
  $2cr37 timeout 2
  !
  aaa authentication exec authentication-server
• D.aaa-server tacacs1 (inside) host 10.5.109.18
  $2cr37 timeout 2
  !
  aaa authentication exclude ssh

A customer has implemented a BYOD policy to allow employees to use personal devices on the corporate network. Which two methods can an employee use to add their devices to the network?

• A.Client Information Signaling
• B.Helpdesk registration
• C.My Device portal
• D.native supplicants
• E.Client Handshake Authentication