350-701 · Question #76
When wired 802.1X authentication is implemented, which two components are required? (Choose two.)
The correct answer is A. authentication server: Cisco Identity Service Engine C. authenticator: Cisco Catalyst switch. For wired 802.1X authentication, a network access device acting as an authenticator (like a Cisco Catalyst switch) and an authentication server (like Cisco Identity Services Engine) are essential components. The switch forwards authentication requests to the server, which validat
Question
When wired 802.1X authentication is implemented, which two components are required? (Choose two.)
Options
- Aauthentication server: Cisco Identity Service Engine
- Bsupplicant: Cisco AnyConnect ISE Posture module
- Cauthenticator: Cisco Catalyst switch
- Dauthenticator: Cisco Identity Services Engine
- Eauthentication server: Cisco Prime Infrastructure
How the community answered
(21 responses)- A95% (20)
- E5% (1)
Why each option
For wired 802.1X authentication, a network access device acting as an authenticator (like a Cisco Catalyst switch) and an authentication server (like Cisco Identity Services Engine) are essential components. The switch forwards authentication requests to the server, which validates the user/device credentials.
An authentication server, such as Cisco Identity Services Engine (ISE), is required to perform the actual authentication of the client (supplicant) by validating credentials against an identity store and providing authorization policies.
While Cisco AnyConnect ISE Posture module can act as a supplicant, the core required components for 802.1X are the authenticator (switch) and authentication server (ISE).
An authenticator, typically a network device like a Cisco Catalyst switch, is required to enforce access control at the network edge, relaying authentication requests from the supplicant to the authentication server and enforcing the access decision.
Cisco Identity Services Engine (ISE) functions as the authentication server in 802.1X, not the authenticator.
Cisco Prime Infrastructure is a network management system and does not function as an authentication server for 802.1X.
Concept tested: 802.1X authentication components
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.