Exam 350-701 topic 1 question 412 discussion

Actual exam question from Cisco's 350-701

Question #: 412
Topic #: 1

An engineer needs to configure a Cisco Secure Email Gateway (SEG) to prompt users to enter multiple forms of identification before gaining access to the SEG.
The SEG must also join a cluster using the preshared key of cisc421555367. What steps must be taken to support this?

A. Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG GUI.
B. Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG CLI.
C. Enable two-factor authentication through a RADIUS server, and then join the cluster via the SEG CLI
D. Enable two-factor authentication through a TACACS+ server, and then join the cluster via the SEG GUI.

Show Suggested Answer

Suggested Answer: C 🗳️

by Terry0987 at March 3, 2023, 1:33 a.m.

Comments

Submit Cancel

Premium_Pils

6 months ago

Selected Answer: C

C - joining via CLI ESA and SEG semm to have exactly the same process for joining the cluster. These cisco articles are specific for SEG: https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_0101000.html#con_1122185 Creating and Joining a Cluster You cannot create or join a cluster from the Graphical User Interface (GUI). You must use the Command Line Interface (CLI) to create, join, or configure clusters of machines.

upvoted 1 times

Premium_Pils

6 months ago

These are Troubleshooting steps for SEG when joining the cluster fails: https://www.cisco.com/c/en/us/support/docs/security/secure-email-gateway/221658-troubleshoot-failure-to-join-seg-to-clus.pdf The article references the Cluster Configuration article for ESA for more information about the process. So, SEG and ESA use the same steps for building the cluster.

upvoted 1 times

...

Premium_Pils

6 months ago

he clusterconfig Command A machine can create or join a cluster only via the clusterconfig command. Same process as in ESA: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200885-ESA-Cluster-Requirements-and-Setup.html#toc-hId-1251782448

upvoted 1 times

...

InRiL

11 months, 3 weeks ago

A is correct. Joining cluster is from GUI (its configuration is in CLI)

upvoted 2 times

...

Totosos1

2 years, 2 months ago

Selected Answer: C

C is correct: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200885-ESA-Cluster-Requirements-and-Setup.html#toc-hId-1251782448

upvoted 2 times

...

Terry0987

2 years, 3 months ago

Q211 same question with conflicting answer!! Any suggestions?

upvoted 2 times

luismg

9 months ago

SEG is not ESA, that is the key

upvoted 1 times

...

Dorr20

2 years, 2 months ago

C is correct. Only Radius is supported. Cluster configuration is only via CLI

upvoted 2 times

Premium_Pils

6 months ago

Yes, Radius is sure: https://www.cisco.com/c/en/us/td/docs/security/esa/esa15-0/user_guide/b_ESA_Admin_Guide_15-0/b_ESA_Admin_Guide_12_1_chapter_0100001.html The email gateway provides two methods for adding user accounts: creating user accounts on the email gateways itself, and enabling user authentication using your own centralized authentication system, which can be either an LDAP or RADIUS directory. The userconfig > twofactorauth command in the CLI. See the CLI Reference Guide for AsyncOS for Cisco Secure Email Gateway.

upvoted 1 times

...