Which two statements about 802.1X are true? (Choose three)

The correct answer is B. It can allow and deny port access based on device identity D. It can allow and deny port access based on user identity E. EAP messages in Ethernet frames and don't use PPP. 802.1X is an IEEE standard (not Cisco-proprietary), so A is false. It supports port-based Network Access Control (NAC) and can authenticate both based on device identity (e.g., certificate or MAC - B is true) and user identity (e.g., username/password via RADIUS - D is true)…

Security Services

Question

Options

AIt is Cisco standard
BIt can allow and deny port access based on device identity
CIt works only with wired devices
DIt can allow and deny port access based on user identity
EEAP messages in Ethernet frames and don't use PPP
FEAP messages in Ethernet frames and use PPP

How the community answered

(39 responses)

B
90% (35)
C
8% (3)
F
3% (1)

Explanation

802.1X is an IEEE standard (not Cisco-proprietary), so A is false. It supports port-based Network Access Control (NAC) and can authenticate both based on device identity (e.g., certificate or MAC - B is true) and user identity (e.g., username/password via RADIUS - D is true). 802.1X works with both wired and wireless devices, so C is false. The 802.1X protocol uses EAP over LAN (EAPOL), which encapsulates EAP messages directly in Ethernet frames - it does not use PPP (E is true, F is false).

Topics

#802.1X#port-based authentication#EAP#network access control

Community Discussion

No community discussion yet for this question.

Full 300-320 Practice