300-208 Questions Answers With 100% Passing Guarantee

1
Cisco- 642-742 Dumps PDF
Pass Cisco 642-742 exam in just 24 HOURS With
100 Guarantee Top 100 REAL EXAM QUESTIONS
ANSWERS Get All PDF with Complete Questions
Answers File from 100 Exam Passing Guarantee
Money Back Assurance
Sample Questions
2

• Question 1
• Cisco 802.1X phasing enables flexible deployments
  through the use of open, low- impact, and closed
  modes. What is a unique characteristic of the
  most secure mode?
• Granular ACLs applied prior to authentication
• Per user dACLs applied after successful
  authentication
• Only EAPoL traffic allowed prior to
  authentication
• Adjustable 802.1X timers to enable successful
  authentication
• Answer C

• Question 2
• A network administrator must enable which
  protocol extension to utilize EAP- Chaining?
• EAP-FAST
• EAP-TLS
• MSCHAPv2
• PEAP
• Answer A

• Question 3
• In the command 'aaa authentication default group
  tacacs local', how is the word 'default'
  defined?
• Command set
• Group name
• Method list
• Login type.
• Answer C

3

• Question 4
• Changes were made to the ISE server while
  troubleshooting, and now all wireless
  certificate authentications are failing. Logs
  indicate an EAP failure. What is the most likely
  cause of the problem?
• EAP-TLS is not checked in the Allowed Protocols
  list
• Certificate authentication profile is not
  configured in the Identity Store
• MS-CHAPv2-is not checked in the Allowed Protocols
  list
• Default rule denies all traffic
• Client root certificate is not included in the
  Certificate Store
• Answer A

• Question 5
• The NAC Agent uses which port and protocol to
  send discovery packets to an ISE Policy Service
  Node?
• tcp/8905
• udp/8905
• http/80
• https/443
• Answer B

• Question 6
• Which two conditions are valid when configuring
  ISE for posturing? (Choose two.)
• Dictionary
• member Of
• Profile status
• File
• Service
• Answer D, E

4

• Question 7
• In AAA, what function does authentication
  perform?
• It identifies the actions that the user can
  perform on the device.
• It identifies the user who is trying to access a
  device.
• It identifies the actions that a user has
  previously taken.
• It identifies what the user can access.
• Answer B

• Question 8
• Which identity store option allows you to modify
  the directory services that run on TCP/IP?)
• Lightweight Directory Access Protocol
• RSA SecurID server
• RADIUS
• Active Directory
• Answer A

Question 9
that seeks connectivity to the
Which term describes a software application
network via a network access device?

• authenticator
• server
• supplicant
• WLC
• Answer C

5

• Question 10
• Cisco ISE distributed deployments support which
  three features? (Choose three.)
• global implementation of the profiler service CoA
• global implementation of the profiler service in
  Cisco ISE
• configuration to send system logs to the
  appropriate profiler node
• node-specific probe configuration
• server-specific probe configuration
• Net Flow probes
• Answer A, C, D

Buy Complete Questions Answers File from 100
Exam Passing Guarantee Money Back
Assurance PDF Version Test Engine Software
Version 60 Days Free Updates Service Valid for
All Countries