QUESTION: 65

A network administrator must configure endpoints using an 802.1X authentication method with EAP identity certificates that are provided by the Cisco ISE.
When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network.
Which EAP type must be configured by the network administrator to complete this task?

EAP-TTLS
EAP-TLS
EAP-FAST
EAP-PEAP-MSCHAPv2

Answer(s): B

Reference:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure- eap-tls-authentication-with-is.html

Reveal Solution Next Question

QUESTION: 66

An organization wants to standardize the 802.1X configuration on their switches and remove static ACLs on the switch ports while allowing Cisco ISE to communicate to the switch what access to provide.
What must be configured to accomplish this task?

dynamic access list within the authorization profile
extended access-list on the switch for the client
security group tag within the authorization policy
port security on the switch based on the client’s information

Answer(s): A

Reveal Solution Next Question

QUESTION: 67

Refer to the exhibit.
In which scenario does this switch configuration apply?

when allowing a hub with multiple clients connected
when allowing multiple IP phones to be connected
when preventing users with hypervisor
when bypassing IP phone authentication

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/5700/sec- user-8021x-xe-3se-5700-book/sec-ieee-802x-multi-auth.html

Reveal Solution Next Question

QUESTION: 68

Refer to the exhibit.
Which switch configuration change will allow only one voice and one data endpoint on each port?

auto to manual
mab to dot1x
multi-auth to multi-domain
multi-auth to single-auth

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-6/ configuration_guide/sec/b_166_sec_9300_cg/configuring_ieee_802_1x_port_based_authentication.html

Reveal Solution Next Question

Free 300-715 Exam Braindumps (page: 18)

QUESTION: 65

Reference:

QUESTION: 66

QUESTION: 67

Reference:

QUESTION: 68

Reference:

Exam Discussions & Posts