4.12 Certification-Based Authentication Using Cisco ISE CCIE-SECURITY Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary benefit of using certificate-based authentication over simple username/password authentication in Cisco ISE?

   • ACertificates are easier to deploy than usernames and passwords.
   • BCertificates provide stronger identity assurance through cryptographic proof of possession.
   • CCertificates do not expire, unlike passwords which must be changed regularly.
   • DCertificates eliminate the need for any user interaction during authentication.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which Cisco ISE configuration is essential for EAP-TLS to work?

   • AA shared secret configured on the client
   • BA PAC file provisioned to the client
   • CA certificate for the ISE server that is trusted by the clients
   • DA RADIUS server address on the client
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In PEAP authentication, what is the role of the server certificate?

   • AIt is used to generate the PAC for the client
   • BIt is used to authenticate the client to the server
   • CIt is optional and only used if the client requests it
   • DIt is used to encrypt the inner authentication method
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In EAP-FAST, what is the purpose of the PAC (Protected Access Credential)?

   • AIt is a certificate used for server authentication
   • BIt is a certificate for client authentication
   • CIt is a shared secret that establishes a secure tunnel
   • DIt is a username and password for the inner method
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the key difference between machine and user certificate authentication in Cisco ISE?

   • AMachine authentication uses EAP-TLS, user uses PEAP
   • BMachine authentication does not require a certificate, user does
   • CMachine authentication is only for wired, user for wireless
   • DMachine authentication uses the computer's certificate, while user authentication uses the user's certificate
   Reveal Solution Discussion Select an answer first