Question 43 of 530 from exam 400-251: CCIE Security written exam

Question 43 of 530 from exam 400-251: CCIE Security written exam

Prev Question Next Question

Question

Refer to the exhibit.

‘other commands omitted
switch(config-if}# switchport access vian 10

4f)# switchport mode access

if)# switchport voice vlan 20

# dotix pae authenticator
authentication port-control auto
authentication host-mode multi-domain
4f)#authentication order mab dot1x
4f)#authentication priority dotlx mab
if#mab

‘other commands omitted

switch(confi
switch(confi
switch(confi

Which statement about this Cisco Catalyst switch 802.1X configuration is true?

Answers

A. If an IP phone behind the switch port has an 802.1X supplicant, MAC address bypass will still be used to authenticate the IP Phone.

B. If an IP phone behind the switch port has an 802.1X supplicant, 802.1X authentication will be used to authenticate the IP phone.

C. The authentication host-mode multi-domain command enables the PC connected behind the IP phone to bypass 802.1X authentication.

D. Using the authentication host-mode multi-domain command will allow up to eight PCs connected behind the IP phone via a hub to be individually authentication.

Explanations

A. B. C. D.

B.

Prev Question Next Question