350-401 Question 305
Select 2A network administrator is configuring network access control on a Cisco switch to provide secure authentication for endpoints. The requirement is to authenticate corporate devices using certificates, while allowing guest devices with no 802.1X capability to access a web-based authentication portal. What combination of methods should the administrator configure?
- A
802.1X for corporate devices and MAB for guest devices
- B
MAB for corporate devices and WebAuth for guest devices
- C
802.1X for corporate devices and WebAuth for guest devices
- D
802.1X for corporate devices only, with no authentication for guest devices
- E
WebAuth for both corporate and guest devices
Show answer and explanation
Correct answers: A, C
Explanation
In this scenario, 802.1X is the best solution for corporate devices as it provides secure, certificate-based authentication. However, guest devices often lack 802.1X capabilities, making WebAuth a suitable option to redirect them to a portal for authentication. Combining these two methods ensures secure and flexible access control for both corporate and guest devices.
- A. Correct.
Correct. 802.1X is suitable for authenticating corporate devices using certificates, and MAB (MAC Authentication Bypass) can serve as a fallback mechanism. However, in this scenario, WebAuth is preferred for guest devices as it provides a user-friendly portal for access.
- B. Incorrect.
Incorrect. MAB is not typically used for corporate devices as it does not provide strong authentication. WebAuth is better suited for guest devices.
- C. Correct.
Correct. 802.1X is ideal for corporate devices leveraging certificates, while WebAuth provides a convenient method for guest devices without 802.1X support to authenticate via a web portal.
- D. Incorrect.
Incorrect. Not authenticating guest devices would pose a security risk. A mechanism like WebAuth should be implemented for guest access control.
- E. Incorrect.
Incorrect. Using WebAuth for corporate devices does not meet the requirement of certificate-based authentication for secure corporate access.