350-701 · Question #350
An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which act
The correct answer is B. Install and configure the Cisco DUO Authentication Proxy and configure the identity source. You would have to authenticate first successfully before DUO is triggered for MFA, DUO would not handle authentication directly. https://community.cisco.com/t5/security-documents/duo-mfa-integration-with-ise-for-tacacs- device-administration/ta-p/3881767
Question
An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?
Options
- AConfigure Cisco DUO with the external Active Directory connector and tie it to the policy set
- BInstall and configure the Cisco DUO Authentication Proxy and configure the identity source
- CCreate an identity policy within Cisco ISE to send all authentication requests to Cisco DUO.
- DModify the current policy with the condition MFASourceSequence DUO=true in the
How the community answered
(44 responses)- A2% (1)
- B84% (37)
- C9% (4)
- D5% (2)
Explanation
You would have to authenticate first successfully before DUO is triggered for MFA, DUO would not handle authentication directly. https://community.cisco.com/t5/security-documents/duo-mfa-integration-with-ise-for-tacacs- device-administration/ta-p/3881767
Topics
Community Discussion
No community discussion yet for this question.