Refer to the exhibit. Which switch configuration change will allow only one voice and one data endpoint on each port?

The correct answer is A. Multi-auth to multi-domain. Cisco switch port authentication host modes define how many and what type of devices can authenticate on a single port. Multi-auth mode allows multiple devices of any type (data or voice) to independently authenticate on the same port - it does not enforce a one-voice/one-data…

Policy Enforcement

Question

Exhibit

Options

AMulti-auth to multi-domain
BMab to dot1x
CAuto to manual
DMulti-auth to single-auth

How the community answered

(39 responses)

A
85% (33)
B
5% (2)
C
8% (3)
D
3% (1)

Explanation

Cisco switch port authentication host modes define how many and what type of devices can authenticate on a single port. Multi-auth mode allows multiple devices of any type (data or voice) to independently authenticate on the same port - it does not enforce a one-voice/one-data restriction. Multi-Domain Authentication (MDA) mode, by contrast, explicitly separates the port into two domains - a Data domain and a Voice domain - and allows exactly one authenticated device per domain. This enforces the requirement of one data endpoint and one IP phone per port. Changing from multi-auth to multi-domain (option A) achieves this goal. The other options - changing MAB to dot1x, auto to manual, or multi-auth to single-auth - do not provide the dual-domain enforcement needed.

Topics

#Network Access Control#802.1X#Switch Port Authentication#Multi-domain Authentication

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice