350-701 Question #2: Real Exam Question with Answer & Explanation

Question

Which command enables 802.1X globally on a Cisco switch?

Options

• Adot1x system-auth-control
• Bdot1x pae authenticator
• Cauthentication port-control auto
• Daaa new-model

Explanation

The dot1x system-auth-control command globally enables 802.1X port-based authentication on a Cisco switch.

Common mistakes.

• B. dot1x pae authenticator is an interface-level command used to configure the Port Access Entity (PAE) role on a specific port, not to enable 802.1X globally.
• C. authentication port-control auto is an interface-level command that sets the authentication control mode for a specific port to automatically authenticate devices, rather than a global enablement command.
• D. aaa new-model enables the new Authentication, Authorization, and Accounting (AAA) model, which is a necessary prerequisite for many advanced security features like 802.1X, but it does not directly enable 802.1X itself.

Concept tested. Cisco switch 802.1X global enablement.

Reference. https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3560/software/release/12-2_55_se/configuration/guide/3560_scg/sw8021x.html

No community discussion yet for this question.