What must be configured first when creating an access policy that matches the Active Directory group?

The correct answer is C. authentication realm. Before you can create an Identification Profile or Access Policy that uses Active Directory (AD) group membership as a matching criterion, the WSA must first have an authentication realm configured. The authentication realm defines the authentication server (e.g., LDAP…

Cisco WSA Authentication

Question

Options

Aauthentication, authorization, and accounting of groups
BFQDN specification
Cauthentication realm
Dauthorized groups specification

How the community answered

(37 responses)

A
3% (1)
C
95% (35)
D
3% (1)

Explanation

Before you can create an Identification Profile or Access Policy that uses Active Directory (AD) group membership as a matching criterion, the WSA must first have an authentication realm configured. The authentication realm defines the authentication server (e.g., LDAP, NTLM/Kerberos for Active Directory), the connection settings, and the credentials used to query the directory. Without the authentication realm, the WSA has no way to query AD to resolve user identities and group memberships. AAA groups (A) and authorized group specifications (D) depend on the realm being set up first, and FQDN specification (B) is unrelated to AD group matching.

Topics

#Authentication Realm#Active Directory Integration#Access Policy Prerequisites#Cisco WSA Configuration

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice