300-715 Question #228: Real Exam Question with Answer & Explanation

Question

An engineer is unable to use SSH to connect to a switch after adding the required CLI commands to the device to enable TACACS+. The device administration license has been added to Cisco ISE, and the required policies have been created. Which action is needed to enable access to the switch?

Options

• AThe ip ssh source-interface command needs to be set on the switch
• B802.1X authentication needs to be configured on the switch.
• CThe RSA keypair used for SSH must be regenerated after enabling TACACS+.
• DThe switch needs to be added as a network device in Cisco ISE and set to use TACACS+.

Explanation

To enable TACACS+ access to a switch after initial configuration, the switch must be explicitly registered as a network device in Cisco ISE and configured to use TACACS+.

Common mistakes.

• A. The ip ssh source-interface command specifies the source interface for SSH connections but is not directly related to enabling TACACS+ authentication itself.

Concept tested. Cisco ISE network device registration for TACACS+

Reference. https://www.cisco.com/c/en/us/td/docs/security/ise/2-7/admin_guide/b_ISE_admin_guide_27/b_ISE_admin_guide_27_chapter_00.html#concept_A2EF84D878134F9BB343E822DAA41097

No community discussion yet for this question.