nerdexam
CiscoCisco

300-715 · Question #371

300-715 Question #371: Real Exam Question with Answer & Explanation

The correct answer is D: Switch(config-if)# mab. {"question_number": 5, "question": "An engineer is assigned to enable MAB (MAC Authentication Bypass) across all access switches in the network.", "correct_answer": "D", "explanation": "The mab command is an interface-level command and must be entered in interface configuration m

Network Access Device Administration

Question

An engineer is assigned to enhance security across the campus network. The task is to enable MAB across all access switches in the network. Which command must be entered on the switch to enable MAB?

Options

  • ASwitch(config)# authentication port-control auto
  • BSwitch(config)# mab
  • CSwitch# authentication port-control auto
  • DSwitch(config-if)# mab

Explanation

{"question_number": 5, "question": "An engineer is assigned to enable MAB (MAC Authentication Bypass) across all access switches in the network.", "correct_answer": "D", "explanation": "The mab command is an interface-level command and must be entered in interface configuration mode (config-if), not global configuration mode. MAB is enabled per-port because it applies to a specific switchport, not to the device globally. The command authentication port-control auto (options A and C) enables 802.1X port-based authentication on an interface but does not enable MAB on its own. MAB requires mab to be configured at the interface level to allow MAC address-based authentication as a fallback or standalone method.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

Topics

#MAB#MAC Authentication Bypass#Switch configuration#Network Access Control

Community Discussion

No community discussion yet for this question.

Full 300-715 PracticeBrowse All 300-715 Questions