Câu 122: 400-251: CCIE Security Written Exam

In an effort to secure your enterprise campus network, any endpoint that connects to the network must authenticate before being granted access. For all corporate-owned endpoints, such as laptops, mobile phones and tablets, you want to enable 802.1x, and after devices are authenticated, allow full access to the network. For all employee-owned personal devices, you want to use web authentication, and allow only limited access to the network. Which two actions ensure that an employee on a personal device cannot use Active Directory credentials to log on to the network by simply reconfiguring their supplicant, to use 802.1x and getting unfettered access? (Choose two.)

1. A. Use EAP-FAST
2. B. Use PEAP-EAP-TLS — đáp án hiện tại
3. C. Use PEAP-EAP-MSCHAPv2
4. D. Use EAP-TLS or EAP-TTLS — đáp án hiện tại
5. E. Use EAP-MSCHAPv2
6. F. Use PAP-CHAP-MSCHAP