Authentication

Question 1

PIP

Answer 1

Policy Infomation Point- the correct identity store

Question 2

Authentication rules are processed in top-down, first-match order, just like a firewall policy

Answer 2

true

Question 3

PAP- Password Authentication Protocol

Answer 3

username is sent in the clear; password is optionally encrypted. PAP is normally used with MAB, and some devices use PAP for web authentications. We recommend you enable this for the MAB rule only and disable PAP for any authentication rules for real authentications

Question 4

CHAP

Answer 4

Challenge Handshake Authentication Protocol. Username and password are encrypted using a challenge sent from the server. Challenge Handshake Authentication is not often used with network access; however, some vendors will send MAB using CHAP instead of PAP

Question 5

ISE authentication rule set

Answer 5

Reject- send Access-Reject back to the NAD
Continue- continue to the authorization policy regardless of the authentication pass/fail (used with web authentication)
Drop- Do not respond to the NAD because NAD will treat as if RADIUS server is dead

Question 6

A simple condition

Answer 6

is just a single attribute that has been saved to the library for reuse

Question 7

A compound condition

Answer 7

is the joining of more than one condition with an AND or OR operator