300-715 · Question #411
An engineer is configuring a Sponsor portal in Cisco ISE. The authentication flow must go to an external source that uses Kerberos. Which type of external database must be used to meet the…
The correct answer is C. Active Directory. Kerberos is the native authentication protocol of Microsoft Active Directory. When sponsors must authenticate using Kerberos tickets, Active Directory is the only identity source in this list that supports Kerberos. AD uses Kerberos v5 as its primary authentication mechanism…
Question
An engineer is configuring a Sponsor portal in Cisco ISE. The authentication flow must go to an external source that uses Kerberos. Which type of external database must be used to meet the requirement?
Options
- ARADIUS
- BSAML
- CActive Directory
- DLDAP
How the community answered
(22 responses)- B9% (2)
- C86% (19)
- D5% (1)
Explanation
Kerberos is the native authentication protocol of Microsoft Active Directory. When sponsors must authenticate using Kerberos tickets, Active Directory is the only identity source in this list that supports Kerberos. AD uses Kerberos v5 as its primary authentication mechanism for domain-joined environments. LDAP (option D) uses LDAP bind operations for authentication, not Kerberos. SAML (option B) is a federated SSO protocol that uses assertions, and RADIUS (option A) uses the RADIUS protocol - neither natively implements Kerberos.
Topics
Community Discussion
No community discussion yet for this question.