nerdexam
Cisco

300-715 · Question #202

An administrator is configuring a switch port for use with 802.1X. What must be done so that the port will allow voice and multiple data endpoints?

The correct answer is C. Use the command authentication host-mode multi-domain on the port. In Cisco 802.1X switch port configuration, the host-mode determines how many and what types of devices can authenticate on a single port. The authentication host-mode multi-domain command enables Multi-Domain Authentication (MDA), which allows the port to operate across two…

Policy Enforcement

Question

An administrator is configuring a switch port for use with 802.1X. What must be done so that the port will allow voice and multiple data endpoints?

Options

  • AConfigure the port with the authentication host-mode multi-auth command
  • BConnect the data devices to the port, then attach the phone behind them.
  • CUse the command authentication host-mode multi-domain on the port
  • DConnect a hub to the switch port to allow multiple devices access after authentication

How the community answered

(38 responses)
  • A
    16% (6)
  • B
    5% (2)
  • C
    76% (29)
  • D
    3% (1)

Explanation

In Cisco 802.1X switch port configuration, the host-mode determines how many and what types of devices can authenticate on a single port. The authentication host-mode multi-domain command enables Multi-Domain Authentication (MDA), which allows the port to operate across two separate domains: a voice domain (for IP phones, tagged on the voice VLAN) and a data domain (for PCs or other data devices). This is the standard and recommended configuration for ports connected to IP phones with downstream data devices, as it enforces independent authentication per domain while keeping voice and data traffic logically separated. Option A (multi-auth) allows multiple independently authenticated devices in both domains but is more complex and typically used in conference room scenarios, not the standard phone+PC deployment.

Topics

#802.1X#Multi-domain authentication#Voice VLAN#Switch Port Security

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice