We're so confident of our products that we provide no hassle product exchange.
High level topics covered by our practice test
This Web Simulator is for Cisco network administrators that are ready to start building Network infrastructure and would like to take the 300-208 certification exam. Using the Web Simulator will provide you with training in network fundamentals, LAN switching technologies, routing technologies, infrastructure services, and infrastructure maintenance.
Cisco 300-208 Exam Topics:
| Section | Weight | Objectives |
|---|---|---|
| Threat Defense | 10% | 1 Describe TrustSec Architecture a) SGT Classification - dynamic/static b) SGT Transport - inline tagging and SXP c) SGT Enforcement - SGACL and SGFW d)MACsec |
| Identity Management/Secure Access | 33% | 1 Implement device administration a) Compare and select AAA options b)TACACS+ c) RADIUS d) Describe Native AD and LDAP 2 Describe identity management a) Describe features and functionality of authentication and authorization b) Describe identity store options (i.e., LDAP, AD, PKI, OTP, Smart Card, local) c) Implement accounting 3 Implement wired/wireless 802.1X a) Describe RADIUS flows b) AV pairs c)EAP types d) Describe supplicant, authenticator, and server e) Supplicant options f) 802.1X phasing (monitor mode, low impact, closed mode) g) AAA server h) Network access devices 4 Implement MAB a) Describe the MAB process within an 802.1X framework b) Flexible authentication configuration c)ISE authentication/authorization policies d)ISE endpoint identity configuration e) Verify MAB Operation 5 Implement network authorization enforcement a)dACL b) Dynamic VLAN assignment c) Describe SGA d) Named ACL e)CoA 6 Implement Central Web Authentication (CWA) a) Describe the function of CoA to support web authentication b) Configure authentication policy to facilitate CWA c) URL redirect policy d) Redirect ACL e) Customize web portal f) Verify central web authentication operation 7 Implement profiling a) Enable the profiling services b) Network probes c)IOS Device Sensor d) Feed service e) Profiling policy rules f) Utilize profile assignment in authorization policies g) Verify profiling operation 8 Implement guest services a) Managing sponsor accounts b) Sponsor portals c) Guest portals d) Guest Policies e) Self registration f) Guest activation g) Differentiated secure access h) Verify guest services operation 9 Implement posture services a) Describe the function of CoA to support posture services b) Agent options c) Client provisioning policy and redirect ACL d) Posture policy e) Quarantine/remediation f) Verify posture service operation 10 Implement BYOD access a) Describe elements of a BYOD policy b) Device registration c) My devices portal d) Describe supplicant provisioning |
| Threat Defense Architectures | 17% | 1 Design highly secure wireless solution with ISE a) Identity Management b) 802.1X c)MAB d) Network authorization enforcement e)CWA f) Profiling g) Guest Services h) Posture Services i)BYOD Access |
| Identity Management Architectures | 33% | 1 Device administration 2 Identity Management 3 Profiling 4 Guest Services 5 Posturing Services 6 BYOD Access |
| Troubleshooting, Monitoring and Reporting Tools | 7% | 1 Troubleshoot identity management solutions a) Identify issues using authentication event details in Cisco ISE b) Troubleshoot using Cisco ISE diagnostic tools c) Troubleshoot endpoint issues d) Use debug commands to troubleshoot RADIUS and 802.1X on IOS switches and wireless controllers e) Troubleshoot backup operations |
Cisco 300-208 Exam Overview:
| Certification Vendor: | Cisco |
| Exam Name: | Implementing Cisco Secure Access Solutions (SISAS) |
| Exam Number: | 300-208 |
| Passing Score: | Variable (Cisco scaled score, typically around 750/1000) |
| Real Exam Qty: | Approximately 55–65 |
| Exam Format: | Multiple choice, Multiple answer, Simulations / Simlets |
| Related Certifications: | CCNP Security CCNA Security |
| Exam Duration: | 90 minutes |
| Available Languages: | English, Japanese, Simplified Chinese |
| Exam Price: | $300 USD (may vary by region) |
| Certificate Validity Period: | 3 years (CCNP certification validity period) |
| Recommended Training: | Cisco Official Training (Implementing Cisco Secure Access Solutions) Cisco Learning Network - SISAS Resources |
| Exam Registration: | Cisco Certification Exam Registration Pearson VUE Cisco Exams |
| Sample Questions: | Cisco 300-208 Sample Questions |
| Exam Way: | Computer-based exam delivered via Pearson VUE testing centers or online proctored delivery (where available) |
| Pre Condition: | Recommended: CCNA Security or equivalent networking/security knowledge; typically part of CCNP Security certification track |
| Official Syllabus URL: | https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/sisas-300-208.html |
Cisco 300-208 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Profiling and Posture Assessment | - Posture compliance
|
| Topic 2: Authentication, Authorization, and Accounting (AAA) | - AAA protocols and configuration
|
| Topic 3: Guest Access and BYOD | - Bring Your Own Device (BYOD)
|
| Topic 4: Troubleshooting Secure Access | - Diagnostic tools and methods
|
| Topic 5: Cisco Identity Services Engine (ISE) | - ISE deployment and architecture
|
| Topic 6: Secure Access Fundamentals | - Network access control concepts
|
| Topic 7: 802.1X and Network Access Control | - Port-based authentication
|
By Dunn
