4.13 Authentication Methods CCIE-SECURITY Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following best describes how TEAP supports EAP chaining?

   • ATEAP does not support EAP chaining; it only supports a single inner method.
   • BTEAP uses a single inner EAP method that can authenticate both machine and user simultaneously.
   • CTEAP allows multiple inner EAP methods to be executed sequentially within the TLS tunnel, enabling both machine and user authentication.
   • DTEAP performs EAP chaining outside the TLS tunnel to reduce overhead.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a supported inner EAP method for TEAP?

   • AEAP-MD5
   • BEAP-MSCHAPv2
   • CEAP-SIM
   • DEAP-TLS
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a key security consideration when using EAP-GTC as an inner method in TEAP?

   • AEAP-GTC does not support mutual authentication, so it is unsafe even inside a tunnel.
   • BEAP-GTC requires a digital certificate on the client, which is difficult to manage.
   • CEAP-GTC transmits the password in clear text inside the TLS tunnel, so the tunnel must be properly secured.
   • DEAP-GTC is only supported for machine authentication, not user authentication.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In a typical TEAP deployment with Cisco ISE, what is the role of the Cisco ISE?

   • AIt acts as the certificate authority that issues certificates for the TLS tunnel.
   • BIt acts as the network access device (switch or wireless controller) that forwards EAP frames.
   • CIt acts as the supplicant that initiates the TEAP connection.
   • DIt acts as the RADIUS server that terminates the TEAP tunnel and validates the inner EAP methods.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a common use case for deploying TEAP in an enterprise network?

   • ATo provide a lightweight authentication method for IoT devices with limited processing power.
   • BTo provide secure wireless or wired access that requires both machine and user authentication via EAP chaining.
   • CTo authenticate only guest users without any machine authentication.
   • DTo replace all other EAP methods and simplify the network to a single authentication protocol.
   Reveal Solution Discussion Select an answer first