nerdexam
Cisco

300-730 · Question #177

What are the two AAA methods for user authentication when configuring the IKEv2 profile? (Choose two.)

The correct answer is B. eap E. pre-share. EAP and pre-share are the two AAA-based user authentication methods available when configuring an IKEv2 profile on Cisco IOS.

Secure Communications

Question

What are the two AAA methods for user authentication when configuring the IKEv2 profile? (Choose two.)

Options

  • Auser
  • Beap
  • Crsa-sig
  • Dcert
  • Epre-share

How the community answered

(60 responses)
  • A
    7% (4)
  • B
    88% (53)
  • C
    2% (1)
  • D
    3% (2)

Why each option

EAP and pre-share are the two AAA-based user authentication methods available when configuring an IKEv2 profile on Cisco IOS.

Auser

user is not a valid keyword in the IKEv2 profile authentication command syntax and is not a recognized AAA authentication method in Cisco IOS.

BeapCorrect

EAP is used in IKEv2 profiles to delegate user authentication to an AAA server, supporting methods such as EAP-MSCHAPv2 for username and password verification, making it a primary AAA user authentication method in IKEv2 profile configuration.

Crsa-sig

rsa-sig uses RSA digital signatures for certificate-based peer or device authentication and is not classified as an AAA user authentication method in the IKEv2 profile context.

Dcert

cert is not a standard keyword in Cisco IOS IKEv2 profile authentication configuration - certificate-based authentication is specified using rsa-sig or ecdsa-sig, not cert.

Epre-shareCorrect

Pre-share configures a pre-shared key as the authentication credential within the IKEv2 profile, and it is recognized as a valid AAA authentication method in the authentication command syntax of an IKEv2 profile.

Concept tested: IKEv2 profile AAA user authentication methods

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_ikevpn/configuration/xe-16/sec-conn-ikevpn-xe-16-book/sec-conn-ikev2-flex.html

Topics

#IKEv2#AAA#EAP#pre-shared key authentication

Community Discussion

No community discussion yet for this question.

Full 300-730 Practice