400-007: Cisco Certified Design ExpertDemo

By Cisco · Question Mode

QuestionQ170

Security Design

Company XYZ has an office model in which employees may use any available desk and connect their laptops. It wants to authenticate end users with their domain username and password before granting network access. The design must also support controlling traffic within the same group or subnet if a macro- (or micro-) segmentation model is adopted in the future. Which protocol can be recommended to authenticate end users for this design?

  • A LDAP
  • B EAP
  • C TACACS+
  • D RADIUS
Explanation

EAP is used by IEEE 802.1X for identity-based, port-access authentication. A switch can require a connected laptop to complete an EAP exchange using the user’s domain credentials before it authorizes network access. The resulting authenticated identity can also be used by access-control policy systems for group-based segmentation. RADIUS commonly carries EAP messages to the authentication server, but EAP is the protocol/framework that performs the endpoint-user authentication.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!