nerdexam
Cisco

300-320 · Question #311

Which two methods are available to connect a Cisco IOS device to an active directory domain for authentication?

The correct answer is A. LDAP (Lightweight Directory Access Protocol) B. Radius. A Cisco IOS device can connect to Microsoft Active Directory (AD) for authentication using LDAP and RADIUS. LDAP (Lightweight Directory Access Protocol) allows IOS to query AD directly using its native directory protocol - IOS can be configured to bind to AD and authenticate…

Security Services

Question

Which two methods are available to connect a Cisco IOS device to an active directory domain for authentication?

Options

  • ALDAP (Lightweight Directory Access Protocol)
  • BRadius
  • CTACACS+
  • DAAA

How the community answered

(35 responses)
  • A
    89% (31)
  • C
    9% (3)
  • D
    3% (1)

Explanation

A Cisco IOS device can connect to Microsoft Active Directory (AD) for authentication using LDAP and RADIUS. LDAP (Lightweight Directory Access Protocol) allows IOS to query AD directly using its native directory protocol - IOS can be configured to bind to AD and authenticate users against it. RADIUS can integrate with AD indirectly: a RADIUS server (such as Microsoft NPS or Cisco ISE) sits between the IOS device and AD, relaying authentication requests to AD on behalf of the network device. TACACS+ (choice C) is a Cisco-proprietary protocol that works with AAA servers but does not natively interface with AD without an intermediary. AAA (choice D) is a framework/model, not a protocol - it describes the architecture using RADIUS or TACACS+, not a standalone AD integration method.

Topics

#LDAP#RADIUS#Active Directory#AAA

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice