300-715 · Question #21
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?
The correct answer is D. user-presented certificate and a certificate stored in Active Directory. When Cisco ISE performs certificate-based authentication against Active Directory, it can use a binary comparison method. In this process, the certificate presented by the user or device during EAP-TLS authentication is compared byte-for-byte against the certificate stored in…
Question
Which two values are compared by the binary comparison function in authentication that is based on Active Directory?
Options
- Asubject alternative name and the common name
- BMS-CHAFV2 provided machine credentials and credentials stored in Active Directory
- Cuser-presented password hash and a hash stored in Active Directory
- Duser-presented certificate and a certificate stored in Active Directory
How the community answered
(14 responses)- C7% (1)
- D93% (13)
Explanation
When Cisco ISE performs certificate-based authentication against Active Directory, it can use a binary comparison method. In this process, the certificate presented by the user or device during EAP-TLS authentication is compared byte-for-byte against the certificate stored in the user's Active Directory account attribute (userCertificate). This ensures the presented certificate exactly matches the trusted certificate on record in AD. Option A relates to Subject Alternative Name matching, not binary comparison. Options B and C describe password-hash or credential-based comparisons, not certificate binary comparison.
Topics
Community Discussion
No community discussion yet for this question.