300-715 Question #216: Real Exam Question with Answer & Explanation

The correct answer is A: radius server ISE1. To add a Catalyst switch as a Network Access Device for 802.1X authentications with Cisco ISE, the switch must be configured with the RADIUS server's definition, including its address and a shared secret.

Architecture and Deployment

Question

Refer to the exhibit. Which two configurations are needed on a catalyst switch for it to be added as a network access device in a Cisco ISE that is being used for 802.1X authentications? (Choose two)

Options

Aradius server ISE1
Btacacs server ISE1
Cradius server ISE1
Dtacacs server ISE1
Eradius server ISE1

Explanation

To add a Catalyst switch as a Network Access Device for 802.1X authentications with Cisco ISE, the switch must be configured with the RADIUS server's definition, including its address and a shared secret.

Common mistakes.

B. TACACS+ is used for device administration, not for 802.1X network access control. Thus, configuring a TACACS+ server is irrelevant for 802.1X authentications.
D. Similar to B, TACACS+ server configuration is not relevant for 802.1X network access control.

Concept tested. Cisco switch RADIUS server configuration for 802.1X

Reference. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_0101.html

Topics

#802.1X#RADIUS#Cisco ISE integration#Switch configuration

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice Browse All 300-715 Questions