nerdexam
Cisco

352-001 · Question #509

You are the Cisco Network Designer in testking.com. In your company site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses…

The correct answer is A. Layer 2 mode. A NAS that sits physically and logically inline in the traffic path and identifies clients using MAC addresses is operating in Layer 2 mode.

Designing Security

Question

You are the Cisco Network Designer in testking.com. In your company site, a NAS is both physically and logically in the traffic path. The NAS identifies clients solely based on their MAC addresses. In which access mode has this NAS been configured to operate?

Options

  • ALayer 2 mode
  • BLayer 3 mode
  • CLayer 3 In-Band mode
  • DLayer 2 Edge mode

How the community answered

(37 responses)
  • A
    89% (33)
  • B
    3% (1)
  • C
    5% (2)
  • D
    3% (1)

Why each option

A NAS that sits physically and logically inline in the traffic path and identifies clients using MAC addresses is operating in Layer 2 mode.

ALayer 2 modeCorrect

In Layer 2 mode, the NAS is inserted directly into the network path at the data link layer, making it both physically and logically inline. Because MAC addresses are Layer 2 identifiers, using them as the sole client identification method is characteristic of Layer 2 operation, where the NAS can inspect and enforce policy on frames before they are routed.

BLayer 3 mode

Layer 3 mode uses IP addresses for client identification and typically operates as a routed hop, not purely inline at the MAC level.

CLayer 3 In-Band mode

Layer 3 In-Band mode refers to an inline Layer 3 routed deployment using IP-based identification, not MAC-based.

DLayer 2 Edge mode

Layer 2 Edge mode places the NAS at the network edge but is not the standard term for an inline MAC-identifying deployment.

Concept tested: NAS Layer 2 inline access mode MAC-based identification

Source: https://www.cisco.com/c/en/us/td/docs/security/nac/appliance/configuration_guide/49/cam/49cam-book/m_modes.html

Topics

#NAS#network access control#Layer 2 mode#MAC authentication

Community Discussion

No community discussion yet for this question.

Full 352-001 Practice