300-715 · Question #245
Which type of identity store allows for creating single-use access credentials in Cisco ISE?
The correct answer is D. RSA SecurID. RSA SecurID is an identity store that integrates with Cisco ISE to provide dynamic, single-use access credentials through its two-factor authentication tokens. Each token generates a unique passcode, making it suitable for one-time use.
Question
Which type of identity store allows for creating single-use access credentials in Cisco ISE?
Options
- AOpenLDAP
- BLocal
- CPKI
- DRSA SecurID
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- D91% (31)
Why each option
RSA SecurID is an identity store that integrates with Cisco ISE to provide dynamic, single-use access credentials through its two-factor authentication tokens. Each token generates a unique passcode, making it suitable for one-time use.
OpenLDAP is a directory service used for storing user accounts and attributes, but it does not inherently provide single-use or dynamic credentials.
A Local identity store in ISE is for static user accounts and passwords configured directly on the ISE appliance; it does not support single-use credentials in the context of dynamic tokens.
PKI (Public Key Infrastructure) uses digital certificates for authentication, which are typically long-lived and not single-use in the same way a dynamic token passcode is.
RSA SecurID is a strong two-factor authentication method where tokens generate unique, time-sensitive passcodes for each authentication attempt. When integrated with Cisco ISE, these tokens allow for the creation and use of single-use access credentials, enhancing security.
Concept tested: Cisco ISE external identity stores - RSA SecurID
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-4/admin_guide/b_ise_admin_guide_24/b_ise_admin_guide_24_chapter_0110.html#concept_819A2DFE8117498FB273FB726DF96366
Topics
Community Discussion
No community discussion yet for this question.