4.4 AAA for Network Access with 802.1X and MAB Using Cisco ISE CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary purpose of MAC Authentication Bypass (MAB) in a network access environment?

   • ATo provide an additional layer of encryption for wireless networks.
   • BTo authenticate devices that do not support 802.1X by using their MAC address as the credential.
   • CTo authenticate users with a username and password when 802.1X fails.
   • DTo bypass authentication for trusted devices based on their IP address.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   In MAB, what does the authenticator (switch) send to the RADIUS server as the username and password?

   • AThe device's serial number as username and the MAC address as password.
   • BThe device's MAC address in a specific format (e.g., AA:BB:CC:DD:EE:FF) for both username and password.
   • CThe device's IP address as username and a shared secret as password.
   • DThe device's hostname as username and a default password.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the role of Cisco ISE when configured as a RADIUS AAA server for network access?

   • AIt acts as a network switch that forwards traffic based on MAC addresses.
   • BIt encrypts all network traffic between the switch and the endpoint.
   • CIt provides DHCP and DNS services to endpoints.
   • DIt provides authentication, authorization, and accounting services for network devices such as switches and wireless controllers.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In Cisco ISE, which policy type is used to define the conditions under which a user or device is authenticated and what access is granted?

   • AAuthentication and authorization policies
   • BNAT policies
   • CFirewall policies
   • DRouting policies
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which of the following is a component of an AAA policy in Cisco ISE?

   • ADHCP scope
   • BNAT translation
   • CAuthentication rules
   • DRouting table
   Reveal Solution Discussion Select an answer first