Multi-auth: – Every supplicant authenticates individually.
Multi-Domain: – One voice and one data VLAN allowed.
Multi-Host: – If one gets authenticated, the remaining will get authenticated.
The IEEE 802.1X Multiple Authentication feature provides a means of authenticating multiple hosts on a single port. With both 802.1X and non-802.1X devices, multiple hosts can be authenticated using different methods. Each host is individually authenticated before it can gain access to the network resources.
For me it is correct. Refer to this statement in the official book: "It supports the dual-domain solution while allowing virtually unlimited endpoints to be in the data domain".
Option B should be a better answer.
In the context of Cisco ISE, this configuration is typically used when multiple IP phones need to be connected to the same switch port, and each phone requires its own authentication. In this scenario, the switch port is configured as a multi-authentication port, and each IP phone is configured with a unique username and password to authenticate to the network. Once authenticated, each phone is assigned its own VLAN and network access policy based on its authentication credentials.
Option A, allowing a hub with multiple clients connected, is also not applicable as hubs are not used in modern network architectures and port-based authentication does not work with hubs.
Option C, preventing users with hypervisor, is not applicable as this configuration does not address hypervisor-based attacks.
Option D, bypassing IP phone authentication, is not applicable as this configuration enables port-based authentication.
B is NOT CORRECT!
Multi-Auth is extension of Multi-Domain (1 host in Data domain, 1 host in Voice domain), but Multi-Auth allows multiple hosts in Data domain while still allowing only 1 host in Voice domain, so it is not suitable for connection of more IP phones.
--
SISE ebook:
"■ Multidomain Authentication (MDA): MDA extends 802.1X to support IP telephony by modifying 802.1X to understand two separate domains: a data domain and a voice domain. A switch port in MDA mode allows a single MAC address in each domain (that is, one phone and one endpoint behind the phone). It’s important to note that link state cannot be relied on completely because the switch port has more than one device.
■ Multiauthentication (Multi-Auth): Multi-Auth is an extension to MDA. It supports the dual-domain solution while allowing virtually unlimited endpoints to be in the DATA DOMAIN. Each endpoint is required to authenticate, and each authentication session on the port is managed separately. The IP Phone solutions described for MDA are also applicable in Multi-Auth mode."
This section is not available anymore. Please use the main Exam Page.300-715 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
webwalker00
1 year, 1 month agoTHEODORABLE
1 year, 5 months agoCnoteone
1 year, 7 months agoYmerG
1 year, 8 months agozsrite
1 year, 8 months agoNikoTomas
8 months, 1 week agokingsalah1982
2 years ago