Which statement about configuring an identification profile for machine authentication is true?

Question

Options

• ACloud Web Security Connector mode with an active directory enabled supports machine
• BIdentification profile machine ID is supported locally, but the Cisco WSA does not support machine
• CCloud Web Security with Kerberos enabled supports machine authentication
• DIf an Active Directory realm is used, identification can be performed for an authenticated user or IP

• A
  4% (1)
• B
  4% (1)
• C
  91% (21)

Explanation

Cloud Web Security (CWS) with Kerberos authentication enabled supports machine authentication. Kerberos is unique among authentication protocols in that it can authenticate both user accounts and machine/computer accounts in an Active Directory environment. Machine authentication allows policies to be applied before a user logs in, based on the computer's identity rather than a user's credentials. Option A is incorrect because CWSC with Active Directory uses a connector mode that doesn't support machine authentication in the same way. Option B is incorrect because the WSA does support machine authentication via Kerberos. Option D is a true statement about AD realms but does not specifically address machine authentication support.

No community discussion yet for this question.