300-715 Question #114: Real Exam Question with Answer & Explanation

Question

An engineer is migrating users from MAB to 802.1X on the network. This must be done during normal business hours with minimal impact to users. Which CoA method should be used?

Options

• APort Bounce
• BPort Shutdown
• CSession Termination
• DSession Reauthentication

Explanation

To smoothly migrate users from MAB to 802.1X during normal business hours with minimal impact, the Session Reauthentication Change of Authorization (CoA) method should be employed.

Common mistakes.

• A. Port Bounce (Port Reset) physically resets the switch port, causing a momentary loss of link and disrupting any active user sessions.
• B. Port Shutdown disables the switch port entirely, which would completely disconnect the user and require manual intervention or the user to unplug and re-plug.
• C. Session Termination immediately drops the current network session, which is disruptive, although less so than a port bounce, but Session Reauthentication offers a smoother transition.

Concept tested. Cisco ISE Change of Authorization (CoA) - Reauthentication

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/admin_guide/b_ise_admin_guide_3_0/b_ise_admin_guide_30_chapter_0100.html#concept_3500D00276DD4E25B124C27EDD9541F7

No community discussion yet for this question.