Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 188

An engineer is deploying Cisco ISE to use 802.1X authentication for controlling access to the company's wired network. The request from company management is to minimize the impact on users during the rollout of 802.1X on the company switches. Which mode must be used first in a phased 802.1X deployment to fulfill this request?

Answer options

• A. Monitor
• B. Open
• C. Low-impact
• D. Closed

Correct answer: A

Explanation

The Monitor mode allows for the observation of authentication attempts without enforcing 802.1X, making it ideal for a phased rollout as it minimizes user disruption. The other modes, such as Open, Low-impact, and Closed, either do not provide the necessary visibility or could potentially restrict access, which conflicts with the goal of minimizing user impact.