350-701 · Question #75
An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpo
The correct answer is B. Cisco Identity Services Engine. Cisco Identity Services Engine (ISE) is the comprehensive product designed to provide centralized identity and access control, supporting TACACS+ for device administration and 802.1X, MAB, or WebAuth for wired and wireless network authentication. It acts as a policy enforcement p
Question
An engineer needs a solution for TACACS+ authentication and authorization for device administration. The engineer also wants to enhance wired and wireless network security by requiring users and endpoints to use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?
Options
- ACisco Prime Infrastructure
- BCisco Identity Services Engine
- CCisco Stealthwatch
- DCisco AMP for Endpoints
How the community answered
(23 responses)- A13% (3)
- B74% (17)
- C4% (1)
- D9% (2)
Why each option
Cisco Identity Services Engine (ISE) is the comprehensive product designed to provide centralized identity and access control, supporting TACACS+ for device administration and 802.1X, MAB, or WebAuth for wired and wireless network authentication. It acts as a policy enforcement platform for network access.
Cisco Prime Infrastructure is a network management tool for monitoring and configuring network devices, not an access control and authentication platform like ISE.
Cisco Identity Services Engine (ISE) is a robust network access control (NAC) solution that centralizes identity management and access policies. It natively supports TACACS+ for secure device administration (authentication, authorization, and accounting) and implements 802.1X, MAC Authentication Bypass (MAB), and Web Authentication (WebAuth) to secure wired and wireless network access for users and endpoints.
Cisco Stealthwatch (now Cisco Secure Network Analytics) is primarily a network visibility and threat detection solution, focusing on traffic analysis and anomaly detection, not direct access control or TACACS+/802.1X services.
Cisco AMP for Endpoints (now Cisco Secure Endpoint) is an endpoint security solution focused on advanced malware protection, detection, and response, not network access control or device administration authentication.
Concept tested: Cisco ISE capabilities
Source: https://www.cisco.com/c/en/us/products/security/identity-services-engine/index.html
Topics
Community Discussion
No community discussion yet for this question.