Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 234

An engineer is starting to implement a wired 802.1X project throughout the campus. The task is for failed authentication to be logged to Cisco ISE and also have a minimal impact on the users. Which command must the engineer configure?

Answer options

• A. monitor-mode enabled
• B. authentication host-mode multi-auth
• C. authentication open
• D. pae dot1x enabled

Correct answer: C

Explanation

The correct command, 'authentication open', allows the device to accept all traffic for users who fail authentication, thereby reducing the impact on user experience. The other options either enable monitoring, allow multiple authentications, or enable dot1x without addressing the requirement of logging failed authentications while keeping user disruption minimal.