300-208 SISAS
Implementing Cisco Secure Access Solutions
Exam Number 300-208 SISAS
Associated Certifications CCNP Security
The Implementing Cisco Secure Access Solutions (SISAS) (300-208) exam tests whether a network security engineer knows the components and architecture of secure access, by utilizing 802.1X and Cisco TrustSec. This 90-minute exam consists of 65-75 questions and assesses knowledge of Cisco Identity Services Engine (ISE) architecture, solution, and components as an overall network threat mitigation and endpoint control solutions. It also includes the fundamental concepts of bring your own device (BYOD) using posture and profiling services of ISE. Candidates can prepare for this exam by taking the Implementing Cisco Secure Access Solutions (SISAS) course.
Exam Topics
The exam is closed book, and no outside reference materials are allowed. The following topics are general guidelines for the content that is likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. In order to better reflect the contents of the exam and for clarity purposes, the guidelines that follow may change at any time without notice.
33% 1.0 Identity Management and Secure Access
1.1 Implement device administration
1.1.a Compare and select AAA options
1.1.b TACACS+
1.1.c RADIUS
1.1.d Describe Native AD and LDAP
1.2 Describe identity management
1.2.a Describe features and functionality of authentication and authorization
1.2.b Describe identity store options (i.e., LDAP, AD, PKI, OTP, Smart Card, local)
1.2.c Implement accounting
1.3 Implement wired/wireless 802.1X
1.3.a Describe RADIUS flows
1.3.b AV Pairs
1.3.c EAP types
1.3.d Describe supplicant, authenticator, and server
1.3.e Supplicant options
1.3.f 802.1X phasing (monitor mode, low impact, closed mode)
1.3.g AAA server
1.3.h Network access devices
1.4 Implement MAB
1.4.a Describe the MAB process within an 802.1X framework
1.4.b Flexible authentication configuration
1.4.c ISE authentication/authorization policies
1.4.d ISE endpoint identity configuration
1.4.e Verify MAB Operation
1.5 Implement network authorization enforcement
1.5.a dACL
1.5.b Dynamic VLAN assignment
1.5.c Describe SGA
1.5.d Named ACL
1.5.e CoA
1.6 Implement Central Web Authentication (CWA)
1.6.a Describe the function of CoA to support web authentication
1.6.b Configure authentication policy to facilitate CWA
1.6.c URL redirect policy
1.6.d Redirect ACL
1.6.e Customize web portal
1.6.f Verify central web authentication operation
1.7 Implement profiling
1.7.a Enable the profiling services
1.7.b Network probes
1.7.c IOS Device Sensor
1.7.d Feed service
1.7.e Profiling policy rules
1.7.f Utilize profile assignment in authorization policies
1.7.g Verify profiling operation
1.8 Implement guest services
1.8.a Managing sponsor accounts
1.8.b Sponsor portals
1.8.c Guest portals
1.8.d Guest Policies
1.8.e Self registration
1.8.f Guest activation
1.8.g Differentiated secure access
1.8.h Verify guest services operation
1.9 Implement posture services
1.9.a Describe the function of CoA to support posture services
1.9.b Agent options
1.9.c Client provisioning policy and redirect ACL
1.9.d Posture policy
1.9.e Quarantine/remediation
1.9.f Verify posture service operation
1.10 Implement BYOD access
1.10.a Describe elements of a BYOD policy
1.10.b Device registration
1.10.c My devices portal
1.10.d Describe supplicant provisioning
10% 2.0 Threat Defense
2.1 Describe TrustSec Architecture
2.1.a SGT Classification – dynamic/static
2.1.b SGT Transport – inline tagging and SXP
2.1.c SGT Enforcement – SGACL and SGFW
2.1.d MACsec
7% 3.0 Troubleshooting, Monitoring and Reporting Tools
3.1 Troubleshoot identity management solutions
3.1.a Identify issues using authentication event details in Cisco ISE
3.1.b Troubleshoot using Cisco ISE diagnostic tools
3.1.c Troubleshoot endpoint issues
3.1.d Use debug commands to troubleshoot RADIUS and 802.1X on IOS switches and wireless controllers
3.1.e Troubleshoot backup operations
17% 4.0 Threat Defense Architectures
4.1 Design highly secure wireless solution with ISE
4.1.a Identity Management
4.1.b 802.1X
4.1.c MAB
4.1.d Network authorization enforcement
4.1.e CWA
4.1.f Profiling
4.1.g Guest Services
4.1.h Posture Services
4.1.i BYOD Access
33% 5.0 Design Identity Management Architectures
5.1 Device administration
5.2 Identity Management
5.3 Profiling
5.4 Guest Services
5.5 Posturing Services
5.6 BYOD Access
Make The Best Choice Chose – Joogate
Make yourself more valuable in today’s competitive computer industry Joogate’s preparation material includes the most excellent features, prepared by the same dedicated experts who have come together to offer an integrated solution. We provide the most excellent and simple method to pass your Cisco CCNP Security 300-208 exam on the first attempt .
will prepare you for your exam effectively. 300-208 Study Guide. Your exam will download as a single 300-208 PDF or complete 300-208 preparation material as well as over +4000 other technical exam PDF and study material downloads. Forget buying your prep materials separately at three time the price of our – skip the 300-208 audio exams and select the one package that gives it all to you at your discretion: 300-208 Study Materials featuring the study material.
Joogate 300-208 Exam Prepration Tools
Joogate Cisco CCNP Security preparation begins and ends with your accomplishing this credential goal. Although you will take each Cisco CCNP Security online test one at a time – each one builds upon the previous. Remember that each Cisco CCNP Security exam paper is built from a common certification foundation.
300-208 Exam preparation materials
Beyond knowing the answer, and actually understanding the 300-208 test questions puts you one step ahead of the test. Completely understanding a concept and reasoning behind how something works, makes your task second nature. Your 300-208 quiz will melt in your hands if you know the logic behind the concepts. Any legitimate Cisco CCNP Security prep materials should enforce this style of learning – but you will be hard pressed to find more than a Cisco CCNP Security practice test anywhere other than Joogate.
300-208 Exam Questions and Answers with Explanation
This is where your Cisco CCNP Security 300-208 exam prep really takes off, in the testing your knowledge and ability to quickly come up with answers in the 300-208 online tests. Using CCNP Security 300-208 practice exams is an excellent way to increase response time and queue certain answers to common issues.
300-208 Exam Study Guides
All Cisco CCNP Security online tests begin somewhere, and that is what the Cisco CCNP Security training course will do for you: create a foundation to build on. Study guides are essentially a detailed Cisco CCNP Security 300-208 tutorial and are great introductions to new Cisco CCNP Security training courses as you advance. The content is always relevant, and compound again to make you pass your 300-208 exams on the first attempt. You will frequently find these 300-208 PDF files downloadable and can then archive or print them for extra reading or studying on-the-go.
300-208 Exam Video Training
For some, this is the best way to get the latest Cisco CCNP Security 300-208 training. However you decide to learn 300-208 exam topics is up to you and your learning style. The Joogate Cisco CCNP Security products and tools are designed to work well with every learning style. Give us a try and sample our work. You’ll be glad you did.
300-208 Other Features
* Realistic practice questions just like the ones found on certification exams.
* Each guide is composed from industry leading professionals real Cisco CCNP Securitynotes, certifying 100% brain dump free.
* Study guides and exam papers are help you prepare effectively or .
* Designed to help you complete your certificate using only
* Delivered in PDF format for easy reading and printing Joogate unique have you dancing the Cisco CCNP Security jig before you know it
* CCNP Security 300-208 prep files are frequently updated to maintain accuracy. Your courses will always be up to date.
Get CCNP Security ebooks from Joogate which contain real 300-208 exam questions and answers. You WILL pass your CCNP Security exam on the first attempt using only Joogate’s CCNP Security excellent preparation tools and tutorials.
