Implementing and Configuring Cisco Identity Services Engine (SISE) — Question 62

An administrator is adding a switch to a network that is running Cisco ISE and is only for IP Phones. The phones do not have the ability to authenticate via
802.1X.
Which command is needed on each switch port for authentication?

Answer options

• A. dot1x system-auth-control
• B. enable bypass-MAC
• C. enable network-authentication
• D. mab

Correct answer: D

Explanation

The command 'mab' (MAC Authentication Bypass) is appropriate for devices like IP Phones that cannot authenticate using 802.1X. The other options, such as 'dot1x system-auth-control', 'enable bypass-MAC', and 'enable network-authentication', do not provide the necessary configuration for non-802.1X capable devices.