300-725 · Question #3
Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?
The correct answer is D. Standard. On the Cisco WSA, authentication realms are configured under Network > Authentication. When creating an Active Directory realm specifically for Kerberos authentication, you select 'Standard' mode. In Standard mode, the WSA communicates directly with Active Directory domain contro
Question
Which configuration mode does the Cisco WSA use to create an Active Directory realm for Kerberos authentication?
Options
- AForward
- BConnector
- CTransparent
- DStandard
How the community answered
(18 responses)- B6% (1)
- D94% (17)
Explanation
On the Cisco WSA, authentication realms are configured under Network > Authentication. When creating an Active Directory realm specifically for Kerberos authentication, you select 'Standard' mode. In Standard mode, the WSA communicates directly with Active Directory domain controllers to validate Kerberos tickets and perform user lookups. This is the correct mode for full Kerberos support, as it allows the WSA to join the AD domain and request Kerberos service principal names. The other options listed (Forward, Connector, Transparent) are either not valid realm creation modes or refer to proxy deployment modes, not authentication realm modes.
Topics
Community Discussion
No community discussion yet for this question.