300-715 · Question #94
When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an…
The correct answer is C. The devices in the network do not have a supplicant. Engineers should configure MAB when devices on the network lack an 802.1X supplicant, providing a way to authenticate non-802.1X capable endpoints.
Question
When planning for the deployment of Cisco ISE, an organization's security policy dictates that they must use network access authentication via RADIUS. It also states that the deployment provide an adequate amount of security and visibility for the hosts on the network. Why should the engineer configure MAB in this situation?
Options
- AThe Cisco switches only support MAB.
- BMAB provides the strongest form of authentication available.
- CThe devices in the network do not have a supplicant.
- DMAB provides user authentication.
How the community answered
(42 responses)- A2% (1)
- B2% (1)
- C88% (37)
- D7% (3)
Why each option
Engineers should configure MAB when devices on the network lack an 802.1X supplicant, providing a way to authenticate non-802.1X capable endpoints.
Cisco switches support various authentication methods, including 802.1X, not solely MAB.
MAB is considered a weaker form of authentication compared to 802.1X with EAP methods, as MAC addresses can be spoofed.
MAB (MAC Authentication Bypass) is used for network devices that do not support an 802.1X supplicant, such as printers, IP phones, or legacy IoT devices. In such scenarios, MAB allows these devices to authenticate based on their MAC address, providing a level of network access control and visibility.
MAB authenticates devices based on their MAC address, not individual users, making it a device authentication method.
Concept tested: MAC Authentication Bypass (MAB) Use Cases
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/3-1/admin_guide/b_ISE_admin_3_1/m_mac_authentication_bypass.html
Topics
Community Discussion
No community discussion yet for this question.