nerdexam
Cisco

350-701 · Question #75

An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpo

The correct answer is B. Cisco Identity Services Engine. Cisco Identity Services Engine (ISE) is the comprehensive product designed to provide centralized identity and access control, supporting TACACS+ for device administration and 802.1X, MAB, or WebAuth for wired and wireless network authentication. It acts as a policy enforcement p

Submitted by yuki_2020· Mar 30, 2026Secure Network Access, Visibility, and Enforcement

Question

An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?

Options

  • ACisco Prime Infrastructure
  • BCisco Identity Services Engine
  • CCisco Stealthwatch
  • DCisco AMP for Endpoints

How the community answered

(23 responses)
  • A
    13% (3)
  • B
    74% (17)
  • C
    4% (1)
  • D
    9% (2)

Why each option

Cisco Identity Services Engine (ISE) is the comprehensive product designed to provide centralized identity and access control, supporting TACACS+ for device administration and 802.1X, MAB, or WebAuth for wired and wireless network authentication. It acts as a policy enforcement platform for network access.

ACisco Prime Infrastructure

Cisco Prime Infrastructure is a network management tool for monitoring and configuring network devices, not an access control and authentication platform like ISE.

BCisco Identity Services EngineCorrect

Cisco Identity Services Engine (ISE) is a robust network access control (NAC) solution that centralizes identity management and access policies. It natively supports TACACS+ for secure device administration (authentication, authorization, and accounting) and implements 802.1X, MAC Authentication Bypass (MAB), and Web Authentication (WebAuth) to secure wired and wireless network access for users and endpoints.

CCisco Stealthwatch

Cisco Stealthwatch (now Cisco Secure Network Analytics) is primarily a network visibility and threat detection solution, focusing on traffic analysis and anomaly detection, not direct access control or TACACS+/802.1X services.

DCisco AMP for Endpoints

Cisco AMP for Endpoints (now Cisco Secure Endpoint) is an endpoint security solution focused on advanced malware protection, detection, and response, not network access control or device administration authentication.

Concept tested: Cisco ISE capabilities

Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html

Topics

#Cisco ISE#TACACS+#802.1X#Network Access Control

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice