Question 6 of 256

Changes were made to the ISE server while troubleshooting, and now all wireless certificate authentications are failing. Logs indicate an EAP failure. What is the MOST likely cause of the problem?

Answer

Suggested Answer

The suggested answer is A.

The most likely cause of the problem is that EAP-TLS is not checked in the Allowed Protocols list. Since the logs indicate an EAP failure and EAP-TLS is a common protocol used for certificate-based authentication, not having it checked would prevent wireless certificate authentications from succeeding.

Question 7 of 256

The NAC Agent uses which port and protocol to send discovery packets to an ISE Policy Service Node?

Answer

Suggested Answer

The suggested answer is B.

The NAC Agent uses UDP port 8905 to send discovery packets to an ISE Policy Service Node. This is because the Network Admission Control (NAC) uses the SWISS protocol, which is stateless and operates over the User Datagram Protocol (UDP).

Question 8 of 256

Which two conditions are valid when configuring ISE for posturing? (Choose two.)

Answer

Suggested Answer

The suggested answer is D, E.

Question 9 of 256

Refer to the exhibit.

Exam 300-208: Question 9 - Image 1

Which three statements about the given configuration are TRUE? (Choose three.)

Answer

Suggested Answer

The suggested answer is B, C, F.

Question 10 of 256

In AAA, what function does authentication perform?

Answer

Suggested Answer

The suggested answer is B.