Proper study guides for Improve Cisco Implementing Cisco Secure Access Solutions (SISAS) certified begins with Cisco 300 208 dumps preparation products which designed to deliver the Top Quality ccnp security sisas 300 208 official cert guide pdf questions by making you pass the 300 208 dumps test at your first time. Try the free cisco 300 208 demo right now.

Q51. In AAA, what function does authentication perform? 

A. It identifies the actions that the user can perform on the device. 

B. It identifies the user who is trying to access a device. 

C. It identifies the actions that a user has previously taken. 

D. It identifies what the user can access. 

Answer: B 


Q52. Which default identity source is used by the MyDevices_Portal_Sequence identity source sequence? 

A. internal users 

B. guest users 

C. Active Directory 

D. internal endpoints 

E. RADIUS servers 

Answer: A 


Q53. What three changes require restarting the application service on an ISE node?.(Choose three.) 

A. Registering a node. 

B. Changing the primary node to standalone. 

C. Promoting the administration node. 

D. Installing the root CA certificate. 

E. Changing the guest portal default port settings. 

F. Adding a network access device. 

Answer: A,B,C 


Q54. Which option is required for inline security group tag propagation? 

A. Cisco Secure Access Control System 

B. hardware support 

C. Security Group Tag Exchange Protocol (SXP) v4 

D. Cisco Identity Services Engine 

Answer: B 


Q55. Which mechanism does Cisco ISE use to force a device off the network if it is reported lost or stolen? 

A. CoA 

B. dynamic ACLs 

C. SGACL 

D. certificate revocation 

Answer: A 


Q56. What attribute could be obtained from the SNMP query probe? 

A. FQDN 

B. CDP 

C. DHCP class identifier 

D. User agent 

Answer: B 


Q57. Which two portals can be configured to use portal FQDN? (Choose two.) 

A. admin 

B. sponsor 

C. guest 

D. my devices 

E. monitoring and troubleshooting 

Answer: B,D 


Q58. Cisco 802.1X phasing enables flexible deployments through the use of open, low-impact, and closed modes. What is a unique characteristic of the most secure mode? 

A. Granular ACLs applied prior to authentication 

B. Per user dACLs applied after successful authentication 

C. Only EAPoL traffic allowed prior to authentication 

D. Adjustable 802.1X timers to enable successful authentication 

Answer: C 


Q59. What endpoint operating system provides native support for the SPW? 

A. Apple iOS 

B. Android OS 

C. Windows 8 

D. Mac OS X 

Answer: A 


Q60. Refer to the exhibit. 

You are troubleshooting RADIUS issues on the network and the debug radius command returns the given output. What is the most likely reason for the failure? 

A. An invalid username or password was entered. 

B. The RADIUS port is incorrect. 

C. The NAD is untrusted by the RADIUS server. 

D. The RADIUS server is unreachable. 

E. RADIUS shared secret does not match 

Answer: A