nerdexam
Cisco

300-715 · Question #411

An engineer is configuring a Sponsor portal in Cisco ISE. The authentication flow must go to an external source that uses Kerberos. Which type of external database must be used to meet the…

The correct answer is C. Active Directory. Kerberos is the native authentication protocol of Microsoft Active Directory. When sponsors must authenticate using Kerberos tickets, Active Directory is the only identity source in this list that supports Kerberos. AD uses Kerberos v5 as its primary authentication mechanism…

Web Auth and Guest Services

Question

An engineer is configuring a Sponsor portal in Cisco ISE. The authentication flow must go to an external source that uses Kerberos. Which type of external database must be used to meet the requirement?

Options

  • ARADIUS
  • BSAML
  • CActive Directory
  • DLDAP

How the community answered

(22 responses)
  • B
    9% (2)
  • C
    86% (19)
  • D
    5% (1)

Explanation

Kerberos is the native authentication protocol of Microsoft Active Directory. When sponsors must authenticate using Kerberos tickets, Active Directory is the only identity source in this list that supports Kerberos. AD uses Kerberos v5 as its primary authentication mechanism for domain-joined environments. LDAP (option D) uses LDAP bind operations for authentication, not Kerberos. SAML (option B) is a federated SSO protocol that uses assertions, and RADIUS (option A) uses the RADIUS protocol - neither natively implements Kerberos.

Topics

#ISE Sponsor Portal#External Identity Stores#Kerberos Authentication#Active Directory

Community Discussion

No community discussion yet for this question.

Full 300-715 Practice