Get all latest (August) Cisco 300-208 Actual Test 31-40

Ensurepass

 

QUESTION 31

Wireless client supplicants attempting to authenticate to a wireless network are generating excessive log messages. Which three WLC authentication settings should be disabled? (Choose three.)

 

A.

RADIUS Server Timeout

B.

RADIUS Aggressive-Failover

C.

Idle Timer

D.

Session Timeout

E.

Client Exclusion

F.

Roaming

 

Correct Answer: BCD

 

 

QUESTION 32

Which two authentication stores are supported to design a wireless network using PEAP EAP- MSCHAPv2 as the authentication method? (Choose two.)

 

A.

Microsoft Active Directory

B.

ACS

C.

LDAP

D.

RSA Secure-ID

E.

Certificate Server

 

Correct Answer: AB

 

 

QUESTION 33

What is another term for 802.11i wireless network security?

 

A.

802.1x

B.

WEP

C.

TKIP

D.

WPA

E.

WPA2

 

Correct Answer: E

 

 

QUESTION 34

Which two EAP types require server side certificates? (Choose two.)

 

A.

EAP-TLS

B.

PEAP

C.

EAP-MD5

D.

LEAP

E.

EAP-FAST

F.

MSCHAPv2

 

Correct Answer: AB

 

 

QUESTION 35

Where is client traffic decrypted in a controller-based wireless network protected with WPA2 Security?

 

A.

Access Point

B.

Switch

C.

Wireless LAN Controller

D.

Authentication Server

 

Correct Answer: A

 

 

QUESTION 36

Which setting provides the best security for a WLAN and authenticates users against a centralized directory store?

 

A.

WPA2 AES-CCMP and 801.X authentication

B.

WPA2 AES-CCMP and PSK authentication

C.

WPA2 TKIP and PSK authentication

D.

WPA2 TKIP and 802.1X authentication

 

Correct Answer: A

 

 

QUESTION 37

What is a feature of Cisco WLC and IPS synchronization?

 

A.

Cisco WLC populates the ACLs to prevent repeat intruder attacks.

B.

The IPS automatically send shuns to Cisco WLC for an active host block.

C.

Cisco WLC and IPS synchronization enables faster wireless access.

D.

IPS synchronization uses network access points to provide reliable monitoring.

 

Correct Answer: B

 

 

QUESTION 38

Which two components are required to connect to a WLAN network that is secured by EAP-TLS authentication? (Choose two.)

 

A.

Kerberos authentication server

B.

AAA/RADIUS server

C.

PSKs

D.

CA server

 

Correct Answer: BD

 

 

QUESTION 39

Which statement about Cisco Management Frame Protection is true?

 

A.

It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point.

B.

It detects spoofed MAC addresses.

C.

It identifies potential RF jamming attacks.

D.

It protects against frame and device spoofing.

 

Correct Answer: D

 

 

QUESTION 40

Which three statements about the Cisco wireless IPS solution are true? (Choose three.)

 

A.

It enables stations to remain in power-save mode, except at specified intervals to receive data from the access point.

B.

It detects spoofed MAC addresses.

C.

It identifies potential RF jamming attacks.

D.

It protects against frame and device spoofing.

E.

It allows the WLC to failover because of congestion.

 

Correct Answer: BCD

 

Free VCE & PDF File for Cisco 300-208 Real Exam

Instant Access to Free VCE Files: CCNA | CCNP | CCIE …
Instant Access to Free PDF Files: CCNA | CCNP | CCIE …

Comments are closed.