4.13 Authentication Methods CCIE-SECURITY Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How does MAR enforce access policies for authorized machines?

   • ABy requiring the machine to use a specific VPN before accessing the network.
   • BBy assigning different authorization profiles (e.g., VLANs or ACLs) based on whether the machine is authenticated.
   • CBy blocking all traffic from machines that do not have a valid IP address.
   • DBy periodically re-authenticating the machine every few minutes.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How does MAR integrate with EAP chaining in a TEAP session?

   • AMAR replaces the need for EAP chaining by using a single EAP method for both machine and user.
   • BMAR is only used when EAP chaining is not available, as a fallback.
   • CMAR is performed before the TLS tunnel is established, and EAP chaining is used only for user authentication.
   • DThe machine authentication is performed as one inner EAP method, and the user authentication as another, with MAR using the machine result to enforce policy.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the benefit of combining MAR with EAP chaining in TEAP?

   • AIt provides a more secure and granular access control by requiring both machine and user authentication before granting network access.
   • BIt eliminates the need for a TLS tunnel, simplifying the authentication process.
   • CIt allows the use of a single set of credentials for both machine and user, reducing complexity.
   • DIt speeds up the authentication process by performing machine and user authentication in parallel.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In EAP chaining, how are the keys from multiple EAP methods typically combined?

   • AThe keys from each method are concatenated and hashed to produce a single session key.
   • BOnly the keys from the first method are used; subsequent methods are ignored for key derivation.
   • CThe keys are used independently for different network services, with no combination.
   • DThe keys are sent in plaintext to the authentication server for storage.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary role of TLS in TEAP (Tunnel Extensible Authentication Protocol)?

   • ATo establish a secure tunnel that protects the inner EAP methods and enables EAP chaining.
   • BTo provide a backup authentication method if the inner EAP methods fail.
   • CTo replace the need for any inner EAP methods by providing direct authentication.
   • DTo encrypt only the user credentials, not the entire authentication exchange.
   Reveal Solution Discussion Select an answer first