Which two statements about Cisco NAC Agents that are installed on clients that interact with the Cisco ISE profiler are true?

Which two statements about Cisco NAC Agents that are installed on clients that interact with the
Cisco ISE profiler are true? (Choose two.)

Which two statements about Cisco NAC Agents that are installed on clients that interact with the
Cisco ISE profiler are true? (Choose two.)

A.
They send endpoint data to AAA servers.

B.
They collect endpoint attributes.

C.
They interact with the posture service to enforce endpoint security policies.

D.
They block access from the network through noncompliant endpoints.

E.
They store endpoints in the Cisco ISE with their profiles.

F.
They evaluate clients against posture policies, to enforce requirements.

Explanation:

Show Hint

Leave a Reply 2

Your email address will not be published. Required fields are marked *

Hasan Isham

Hasan Isham

[Update]

New 300-208 Exam Questions Updated Recently (1/Mar/2017):

NEW QUESTION 288
An engineer must ensure that all client operating systems have the AnyConnect Agent for an upcoming posture implementation. Which two versions of OS does the AnyConnect posture agent support? (Choose two.)

A. Google Android
B. Ubuntu
C. Apple Mac OS X
D. Microsoft Windows
E. Red Hat Enterprise Linux

Answer: C

NEW QUESTION 289
Which command would be used in order to maintain a single open connection between a network access device and a tacacs server?

A. tacacs-server host timeout
B. tacacs-server host single-connection
C. tacacs-server host
D. tacacs-server host single-connection

Answer: D

NEW QUESTION 290
Refer to the exhibit. Which authentication method is being used?
Evaluating Identity Policy
15006 Matched Default Rule
15013 Selected Identity Store C LDAP_TESTE
22043 Current Identity Store does not support the authentication method; Skipping it

A. PEAP-MSCHAP
B. EAP-GTC
C. EAP-TLS
D. PEAP-TLS

Answer: C

NEW QUESTION 291
A security engineer has a new TrustSec project and must create a few static security group tag classifications as a proof of concept. Which two classifications can the tags be mapped to? (Choose two.)

A. VLAN
B. user ID
C. interface
D. switch ID
E. MAC address

Answer: AC

NEW QUESTION 292

NEW QUESTION 293
Which CoA type does a Cisco ISE PSN send to a network access device when a NAG agent reports the OS patch status of a noncompliant endpoint?

A. CoA-Terminate
B. CoA-PortBounce
C. CoA-Reauth
D. CoA-Remediate

Answer: B

NEW QUESTION 294
……

You Can Get The Newest 300-208 Dumps In PDF And VCE From — http://www.passleader.com/300-208.html (300q VCE and PDF)

Good Luck!

Reply