4.4 AAA for Network Access with 802.1X and MAB Using Cisco ISE CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In the 802.1X authentication flow, what is the role of the authenticator (switch) when a supplicant attempts to connect?

   • AIt generates EAP-Request/Identity messages and sends them directly to the authentication server.
   • BIt forwards EAP frames between the supplicant and the authentication server, and controls the port state based on the authentication result.
   • CIt terminates the EAP conversation and converts it to RADIUS for the authentication server.
   • DIt performs the authentication by validating the supplicant's credentials against its local database.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following attributes can be included in an ISE authorization profile?

   • AVLAN ID or VLAN name
   • BAuthentication method (e.g., EAP-TLS)
   • CRADIUS server shared secret
   • DUser's password
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In Cisco ISE, what is an identity source?

   • AA repository of user or device credentials and attributes used for authentication.
   • BA set of authorization profiles.
   • CA list of network devices that are allowed to connect.
   • DA RADIUS server configuration.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is an example of an external identity source that can be integrated with Cisco ISE?

   • ALocal switch database
   • BActive Directory
   • CInternal user database
   • DRADIUS server
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a vendor-specific attribute (VSA) in RADIUS?

   • AAn attribute used only in TACACS+.
   • BA standard RADIUS attribute defined in RFC 2865.
   • CAn attribute that contains the user's password.
   • DAn attribute defined by a vendor (e.g., Cisco) to carry additional information beyond standard RADIUS attributes.
   Reveal Solution Discussion Select an answer first