nerdexam
Cisco

300-320 · Question #107

Which NAC design model matches the following definitions? - NAS is deployed centrally in the core or distribution layer. - Users are multiple hops away from the Cisco NAS. - After authentication and…

The correct answer is B. Layer 3 out-of-band with addressing. access/product_data_sheet0900aecd802da1b5.html Passing traffic mode · Virtual gateway (bridged mode) · Real IP gateway (routed mode) Client access mode · Layer 2 (client is adjacent to the Cisco NAC Server) · Layer 3 (client is multiple hops from the Cisco NAC Server) Traffic…

Security Services

Question

Which NAC design model matches the following definitions?

  • NAS is deployed centrally in the core or distribution layer.
  • Users are multiple hops away from the Cisco NAS.
  • After authentication and posture assessment, the client traffic no

longer passes through the Cisco NAS.

  • PBR is needed to direct the user traffic appropriately.

Options

  • ALayer 3 in-band virtual gateway
  • BLayer 3 out-of-band with addressing
  • CLayer 2 in-band virtual gateway
  • DLayer 2 out-of-band virtual gateway

How the community answered

(34 responses)
  • A
    9% (3)
  • B
    76% (26)
  • C
    3% (1)
  • D
    12% (4)

Explanation

access/product_data_sheet0900aecd802da1b5.html Passing traffic mode · Virtual gateway (bridged mode) · Real IP gateway (routed mode) Client access mode · Layer 2 (client is adjacent to the Cisco NAC Server) · Layer 3 (client is multiple hops from the Cisco NAC Server) Traffic flow model · In-band (Cisco NAC Server is always in-line with user traffic) · Out-of-band (Cisco NAC Server is in-line only during authentication, posture assessment, and

Topics

#NAC#out-of-band#PBR#network admission control

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice