Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 142

The security team wants to secure the wired network. A legacy printer on the network with the MAC address 00:43:08:50:64:60 does not support 802.1X. Which setting must be enabled in the Allowed Authentication Protocols list in your Authentication Policy for Cisco ISE to support MAB for this MAC address?

Answer options

• A. MS-CHAPv2
• B. EAP-TLS
• C. PAP
• D. Process Host Lookup

Correct answer: D

Explanation

The correct answer is D, as enabling 'Process Host Lookup' is necessary for the MAC Authentication Bypass (MAB) process to recognize and authenticate the legacy printer. The other options, such as MS-CHAPv2, EAP-TLS, and PAP, are not applicable for MAB since they are designed for 802.1X authentication and do not support devices that cannot perform 802.1X.