CiscoCertified Network Professional Security
Domain 6Objective 3
6.3 Configure Network Access Control Mechanisms Such as 802.1X and MAB with Cisco Identity Services Engine 350-701 Practice Questions (Page 5)
Part of the Network Access, Visibility, and Enforcement domain, which accounts for 15% of the 350-701 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
7concepts
15%of the exam
Questions 21–24
- 21
Which AAA command on a Cisco IOS switch configures the device to use RADIUS for 802.1X authentication?
Select an answer first - 22
When configuring a network access device as a RADIUS client in ISE, which two pieces of information must match between the device and the ISE configuration?
Select an answer first - 23
A company uses MAB for IP phones and 802.1X for PCs on the same switch port (multi-domain). The IP phone authenticates via MAB and is placed in the voice VLAN. The PC behind the phone authenticates via 802.1X and is placed in the data VLAN. Recently, the PC fails authentication, and the phone also loses its voice VLAN assignment. ISE logs show the phone's MAB authentication succeeded, but the PC's 802.1X authentication failed. What is the most likely cause of the phone losing its VLAN?
Select an answer first - 24
Which debug command on a Cisco switch is used to troubleshoot 802.1X authentication issues?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-701
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-701” is a trademark of its owner, used for identification only.