Câu 153: 400-251: CCIE Security Written Exam

Your environment has a large number of network devices that are configured to use AAA for authentication. Additionally, your security policy requires use of two- factor authentication or multifactor authentication for all device administrators, which you have integrated with ISE. To simplify device management, your organization has purchased Cisco Prime Infrastructure. Which is the most appropriate way to get Cisco Prime Infrastructure to authenticate to all your network devices?

1. A. Create a user on ISE with a complex password for Cisco Prime Infrastructure, along with an authorization policy that uses the ISE local identity store for that user.
2. B. Enable the AAA API on the network devices, generate an API token, and configure Cisco Prime Infrastructure to use that token when authenticating to the network devices.
3. C. Configure a local user on each of the network devices along with priority to use the local username and password for Cisco Prime Infrastructure.
4. D. Create a user on ISE with a complex password for Cisco Prime Infrastructure, along with an authentication policy that uses the ISE local identity store for that user. — đáp án hiện tại
5. E. Enable multifactor authentication on Cisco Prime Infrastructure.