Q: 8
[Endpoint Protection and Detection]
An engineer needs a solution for TACACS+ authentication and authorization for device
administration.
The engineer also wants to enhance wired and wireless network security by requiring users and
endpoints to
use 802.1X, MAB, or WebAuth. Which product meets all of these requirements?
Options
Discussion
encountered exactly similar question in my exam, on my practice set, it's B.
These Cisco product names always trip people up, it's like they want us to confuse Prime and ISE every exam. Option B
Prime Infrastructure seems right since it manages devices, so A.
ISE is the only one here that does both TACACS+ for admin and supports 802.1X, MAB, WebAuth for endpoints. Pretty sure it's B, but I'd double check the docs since Prime gets confused with AAA sometimes.
ISE is the only one that combines TACACS+, 802.1X, MAB, and WebAuth centralization. B
B tbh, Prime is a trap since it doesn't handle all the AAA stuff needed here.
A could work if you're just thinking about device management since Prime controls infrastructure, right? Doesn't it do some AAA too? Not totally sure but went with A here, since it's tempting for admin tasks.
Nah, it's B. A is always tempting because Prime does a lot, but it doesn't actually handle TACACS+ or all the 802.1X/AAA stuff like ISE. I've seen this type of trap in practice sets.
B fits since ISE does both TACACS+ for device admin and handles 802.1X, MAB, WebAuth for wired and wireless access. Prime is more for managing devices but doesn't do full AAA. Pretty sure it's B here, but correct me if I'm missing something.
Official guide and labs both stress ISE for these use cases. B
Be respectful. No spam.
