Cisco 650-472 - Introduction to 802.1X Operations for Cisco Security Professionals Exam Exam
Page: 3 / 14
Total 69 questions
Question #11 (Topic: )
Which two Cisco Catalyst switch command fragments enable WebAuth support on an
interface? (Choose two.)
interface? (Choose two.)
A. 3k-access(config-if)# authentication fallback
B. 3k-access(config-if)# authentication dotlx webauth
C. 3k-access(config-if)S authentication webauth
D. 3k-access(config-if)# dotlx priority webauth
E. 3k-access(config-if)- ip admission
F. 3k-access(config-if)ff dotlx fallback
G. 3k-access(config-if)# authentication order dotlx webauth
Answer: A,E
Question #12 (Topic: )
Which two statements are true with regard to the inner and outer phases of an EAP
method? (Choose two.)
method? (Choose two.)
A. PEAP can include an optional phase 0 for PAC provisioning.
B. All EAP methods include an inner and outer phase.
C. The outer phase is used for authentication.
D. The inner phase is used for authentication.
E. The outer phase is used for securing the communication channel.
F. The inner phase is used for securing the communication channel.
Answer: D,E
Question #13 (Topic: )
Which Cisco ISE persona must run on dedicated hardware?
A. Inline Posture
B. Administrative
C. Centralized
D. Monitoring
E. Distributed Policy
F. Policy Services
G. Standalone
Answer: A
Question #14 (Topic: )
Which statement accurately describes why it is a best practice to pre-populate the MAC
addresses of non-802.1X-capable Cisco IP phones into an endpoint database?
addresses of non-802.1X-capable Cisco IP phones into an endpoint database?
A. If the MAC address is not found in an endpoint database, any PC tethered to the Cisco IP phone will be allowed to access the network unauthenticated.
B. If the MAC address is not found in an endpoint database, it will take 3 MAB timeouts (90 seconds) before the MAC address of the Cisco IP phone is automatically entered in the database. No calls can be made in the interim.
C. If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the tethered PC port on the phone will be set to err-disable. The PC will not be able to communicate on the network.
D. If the MAC address is not found in an endpoint database, authentication will fail for the Cisco IP phone and the Catalyst switch port will be set to err-disable. Neither the PC host nor the phone will be able to communicate on the network.
Answer: B
Question #15 (Topic: )
Which two Cisco security products act as 802.1X authenticate servers? (Choose two)
A. Cisco Security Agent
B. CiscoWorks LAN Management System
C. Cisco Information Security Engine
D. Cisco Security Manager
E. Cisco Secure Access Control System for Windows
F. CiscoWorks LAN Management Solution
G. CiscoWorks Open RADIUS Server
H. Cisco Identity Services Engine
Answer: E,H
