300-715 · Question #160
A network administrator must configura endpoints using an 802 1X authentication method with EAP identity certificates that are provided by the Cisco ISE. When the endpoint presents the identity…
The correct answer is D. EAP-TLS. EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) is the correct answer. EAP-TLS is the only EAP method that uses digital certificates on both the client (endpoint) and server (ISE) for mutual authentication. The endpoint presents its identity certificate…
Question
A network administrator must configura endpoints using an 802 1X authentication method with EAP identity certificates that are provided by the Cisco ISE. When the endpoint presents the identity certificate to Cisco ISE to validate the certificate, endpoints must be authorized to connect to the network. Which EAP type must be configured by the network administrator to complete this task?
Options
- AEAP-PEAP-MSCHAPv2
- BEAP-TTLS
- CEAP-FAST
- DEAP-TLS
How the community answered
(18 responses)- B6% (1)
- C11% (2)
- D83% (15)
Explanation
EAP-TLS (Extensible Authentication Protocol - Transport Layer Security) is the correct answer. EAP-TLS is the only EAP method that uses digital certificates on both the client (endpoint) and server (ISE) for mutual authentication. The endpoint presents its identity certificate to ISE, and ISE validates it against a trusted CA. EAP-PEAP-MSCHAPv2 and EAP-TTLS use username/password credentials inside a TLS tunnel. EAP-FAST uses PAC files or optionally certificates, but EAP-TLS is the standard certificate-only method and is the most secure.
Topics
Community Discussion
No community discussion yet for this question.