A network security engineer needs to configure 802.1X port authentication to allow a single host to be authenticated for data and another single host to be authenticated for voice. Which command shoul

Question

Options

• Aauthentication host-mode single-host
• Bauthentication host-mode multi-auth
• Cauthentication host-mode multi-host
• Dauthentication host-mode multi-domain

• A
  3% (1)
• B
  13% (5)
• C
  8% (3)
• D
  77% (30)

Explanation

The 'authentication host-mode multi-domain' command enables Multi-Domain Authentication (MDA) on the switch port. MDA divides the port into two logical domains: the Data domain and the Voice domain. It allows exactly one authenticated device per domain - one data device (e.g., a PC) and one voice device (e.g., an IP phone) - each authenticated independently via 802.1X. This matches the requirement perfectly. 'single-host' (A) allows only one device total on the port, blocking the second device. 'multi-host' (C) allows one device to authenticate and then permits all other devices through without authentication - insecure and not what is required. 'multi-auth' (B) allows multiple devices to independently authenticate on the same port, but does not enforce the one-per-domain restriction; it would allow more than one data device, which is not the stated requirement.

No community discussion yet for this question.