4.13 Authentication Methods CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of EAP chaining in a network authentication context?

   • ATo provide a fallback mechanism if the primary EAP method fails, by trying a secondary method in the clear.
   • BTo combine multiple EAP methods in a single authentication exchange, allowing both user and machine credentials to be validated and keys to be derived from both.
   • CTo allow a single EAP method to authenticate multiple devices simultaneously without additional credentials.
   • DTo replace the need for a TLS tunnel by using multiple EAP methods sequentially in the clear.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a MAR-enabled environment, what happens if a machine is not authenticated?

   • AThe machine is allowed access if the user provides valid credentials.
   • BThe machine is denied network access or placed in a restricted network segment.
   • CThe machine is allowed access but only for guest services.
   • DThe machine is allowed access but with limited bandwidth.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In the MAR authentication flow, which credentials are validated first?

   • AOnly user credentials are validated; machine credentials are optional.
   • BMachine credentials are validated first, and then user credentials are validated.
   • CBoth machine and user credentials are validated simultaneously in parallel.
   • DUser credentials are validated first, and then machine credentials are validated.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the role of the RADIUS server in the MAR authentication flow?

   • AIt encrypts the network traffic after authentication is complete.
   • BIt stores the machine's certificates and issues new ones.
   • CIt validates the machine and user credentials and returns an access decision based on MAR policies.
   • DIt only forwards authentication requests to a separate authentication server.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Where is MAR configured in Cisco ISE?

   • AIn the authorization policy, by enabling the 'Machine Access Restriction' condition.
   • BIn the network device settings, by enabling MAR on the RADIUS server.
   • CIn the certificate template, by adding a MAR extension.
   • DIn the identity store, by adding a MAR attribute to each user.
   Reveal Solution Discussion Select an answer first