Question 1 of 30
In a corporate environment, a network administrator is tasked with implementing Cisco Identity Services Engine (ISE) to enhance network security and manage user access. The administrator needs to configure ISE to support both 802.1X authentication for wired devices and MAC authentication bypass (MAB) for non-802.1X capable devices. The administrator must also ensure that the ISE policies are set up to allow guest access while maintaining strict controls for internal users. Which configuration approach should the administrator prioritize to achieve this multi-faceted authentication strategy effectively?
Implement a combination of authorization policies that differentiate between user roles, device types, and authentication methods, ensuring that guest access is limited to specific VLANs while enforcing 802.1X for internal users and MAB for legacy devices.
Configure ISE to allow all devices to connect without authentication to simplify access for users and guests.
Set up a single authentication method for all devices, regardless of their capabilities, to streamline the user experience.
Focus solely on 802.1X authentication and ignore MAB, as it is less secure and not necessary for the network.

Preparing for CISCO 500-470 Cisco Enterprise Networks SDA, SDWAN and ISE Exam for System Engineers? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free