300-715 · Question #331
An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to…
The correct answer is C. force-authorized. To disable 802.1X authentication on switch ports while allowing all endpoints to connect, the force-authorized port-control option must be configured. This setting bypasses the authentication process entirely, making the port immediately available for network traffic.
Question
An engineer is starting to implement a wired 802.1X project throughout the campus. The task is to ensure that the authentication procedure is disabled on the ports but still allows all endpoints to connect to the network. Which port-control option must the engineer configure?
Options
- Apae-disabled
- Bauto
- Cforce-authorized
- Dforce-unauthorized
How the community answered
(19 responses)- A5% (1)
- C89% (17)
- D5% (1)
Why each option
To disable 802.1X authentication on switch ports while allowing all endpoints to connect, the `force-authorized` port-control option must be configured. This setting bypasses the authentication process entirely, making the port immediately available for network traffic.
`pae-disabled` simply turns off the 802.1X functionality on the port, whereas `force-authorized` explicitly sets the port to an authorized state, directly fulfilling the requirement to allow connections without authentication.
The `auto` port-control option enables 802.1X authentication on the port, requiring endpoints to authenticate before gaining network access, which does not meet the requirement of disabling authentication.
The `force-authorized` port-control option on an 802.1X enabled port bypasses the authentication process, allowing any connected endpoint to gain immediate network access without validation. This is specifically used when 802.1X is enabled globally or on an interface, but you want to exempt certain ports from authentication for testing or specific device connectivity.
The `force-unauthorized` port-control option keeps the port in an unauthorized state, effectively blocking all traffic from any connected endpoint, which is contrary to the requirement of allowing all endpoints to connect.
Concept tested: 802.1X port-control modes
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_0100.html#concept_96057D6128034E57B77A34E71B0466FB
Topics
Community Discussion
No community discussion yet for this question.