300-715 · Question #394
An administrator is responsible for configuring network access for a temporary network printer. The administrator must only use the printer MAC address 50:40:16:89:0:AB for authentication. Which authe
The correct answer is C. MAB. MAB (MAC Authentication Bypass) is specifically designed to authenticate devices that cannot run an 802.1X supplicant - such as printers, IP phones, and cameras - using only their MAC address as the credential. The switch sends the device's MAC address to ISE as both the username
Question
An administrator is responsible for configuring network access for a temporary network printer. The administrator must only use the printer MAC address 50:40:16:89:0:AB for authentication. Which authentication method will accomplish the task?
Options
- APosturing
- BProfiling
- CMAB
- D802.1x
How the community answered
(22 responses)- A5% (1)
- C86% (19)
- D9% (2)
Explanation
MAB (MAC Authentication Bypass) is specifically designed to authenticate devices that cannot run an 802.1X supplicant - such as printers, IP phones, and cameras - using only their MAC address as the credential. The switch sends the device's MAC address to ISE as both the username and password, and ISE looks it up in its identity store. Posturing (option A) checks the security compliance state of an endpoint and requires an agent. Profiling (option B) identifies device types based on traffic attributes but is a classification mechanism, not an authentication method on its own. 802.1X (option D) requires a supplicant running on the endpoint, which a legacy printer does not have.
Topics
Community Discussion
No community discussion yet for this question.