An ISE admin is configuring authentication policies for a mixed environment where some users have certificates and some use username/password. They want to use EAP-TLS for certificate users and PEAP-MSCHAPv2 for password users. What is the best way to set up the authentication policy?

Use a single authentication rule that uses 'Internal Users' for both methods.

Create two authentication rules: one for EAP-TLS with 'Internal Users' and another for PEAP-MSCHAPv2 with 'Certificate Authentication'.

Create two authentication rules: one for EAP-TLS with 'Certificate Authentication' identity source, and another for PEAP-MSCHAPv2 with 'Internal Users' identity source.

Use a single authentication rule that accepts both EAP-TLS and PEAP-MSCHAPv2 with 'Certificate Authentication' identity source.

CCIE Security

Domain 4Objective 12

4.12 Certification-Based Authentication Using Cisco ISE CCIE-SECURITY Practice Questions (Page 10)

Part of the 4.0 Identity Management, Information Exchange, and Access Control domain, which accounts for 25% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–1 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

25%of the exam

Questions 46–46

46application · medium
An ISE admin is configuring authentication policies for a mixed environment where some users have certificates and some use username/password. They want to use EAP-TLS for certificate users and PEAP-MSCHAPv2 for password users. What is the best way to set up the authentication policy?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.

4.12 Certification-Based Authentication Using Cisco ISE CCIE-SECURITY Practice Questions (Page 10)

Questions 46–46

An ISE admin is configuring authentication policies for a mixed environment where some users have certificates and some use username/password. They want to use EAP-TLS for certificate users and PEAP-MSCHAPv2 for password users. What is the best way to set up the authentication policy?

Keep studying — 4.0 Identity Management, Information Exchange, and Access Control