Exam 300-725 topic 1 question 30 discussion

Actual exam question from Cisco's 300-725

Question #: 30
Topic #: 1

[All 300-725 Questions]

Which statement about configuring an identification profile for machine authentication is true?

A. Cloud Web Security Connector mode with an active directory enabled supports machine authentication
B. Identification profile machine ID is supported locally, but the Cisco WSA does not support machine ID authentication
C. Cloud Web Security with Kerberos enabled supports machine authentication
D. If an Active Directory realm is used, identification can be performed for an authenticated user or IP address but not for a machine ID

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_01001.html

by newppl1357 at March 3, 2021, 11 a.m.

Comments

Submit Cancel

Mcamacho27

7 months, 3 weeks ago

A. https://community.cisco.com/t5/security-videos/steps-to-configure-machine-id-base-authentication-on-web/ba-p/3105234

upvoted 1 times

...

samismayilov

1 year, 8 months ago

A. AsyncOS does not support Kerberos when the appliance is configured in Cloud Connector mode.

upvoted 3 times

...

Should be A: Identification Profile with define members by Machine ID Requirements: ■ The WSA mode has to be in Cloud Web Security Connector Mode. ■ The WSA AsyncOS version need to be 10.1.x and above. ■ Authentication need to be enabled and has joined the domain. ■ Machine ID Service need to be enabled. https://community.cisco.com/t5/security-videos/steps-to-configure-machine-id-base-authentication-on-web/ba-p/3105234

upvoted 4 times

...