Exam 300-715 topic 1 question 243 discussion

Actual exam question from Cisco's 300-715

Question #: 243
Topic #: 1

A Cisco ISE engineer is creating certificate authentication profile to be used with machine authentication for the network. The engineer wants to be able to compare the user-presented certificate with a certificate stored in Active Directory. What must be done to accomplish this?

A. Add the subject alternative name and the common name to the CAP
B. Use MS-CHAPv2 since it provides machine credentials and matches them to credentials stored in Active Directory.
C. Configure the user-presented password hash and a hash stored in Active Directory for comparison.
D. Enable the option for performing binary comparison.

Show Suggested Answer

Suggested Answer: D 🗳️

by IETF1 at Nov. 21, 2023, 10:08 p.m.

Comments

Submit Cancel

factmrojas

11 months, 1 week ago

Selected Answer: D

To compare a user-presented certificate with a certificate stored in Active Directory for machine authentication in Cisco ISE, you need to: Integrate Cisco ISE with Active Directory. Create a certificate authentication profile that uses binary comparison. Configure the authentication policy to use this certificate authentication profile.

upvoted 1 times

...

IETF1

1 year, 7 months ago

D: https://www.cisco.com/c/en/us/support/docs/lan-switching/8021x/116018-config-8021-00.html

upvoted 2 times

...