Exam 350-701 topic 1 question 458 discussion

should be C. NTLMSSP E. Kerberos https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_0101.html

C,E is correct

To authenticate end users to the WSA, you would typically configure the following two protocols: NTLMSSP and RADIUS. Kerberos is another authentication protocol commonly used in Windows environments, but it is not typically used directly with WSA for web authentication. Instead, NTLMSSP is more commonly used for Windows-based authentication scenarios. Note from Cisco guide: Kerberos is only supported in Standard mode. It is not supported in Cloud Connector mode. Another note from this guide: You can authenticate users through an external LDAP or RADIUS server. (...) The WSA and AD agent communicate with each other using the RADIUS protocol. https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_0101.html

Correct Answer is C & E

chatgpt says C. NTLMSSP D. RADIUS so im going with that :P lol

he correct answer for the question is D. RADIUS E. Kerberos. NTLMSSP is also an option, but it's not a common one as the question is asking for the most common protocols that are used to authenticate end users to the Cisco WSA.https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-7/user_guide/b_WSA_UserGuide_11_7/b_WSA_UserGuide_11_7_chapter_0101.html

Neither RADIUS or TACACS+ authenticates the user. They facilitate communication to the authentication server. Kerberos and NTLMSSP do authenticate the user.