Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 203

A network engineer must configure a Cisco ESA to prompt users to enter two forms of information before gaining access. The Cisco ESA must also join a cluster machine using preshared keys. What must be configured to meet these requirements?

Answer options

• A. Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA GUI.
• B. Enable two-factor authentication through a TACACS+ server and then join the cluster by using the Cisco ESA CLI.
• C. Enable two-factor authentication through a TACACS+ server and then join the cluster by using the Cisco ESA GUI.
• D. Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA CLI.

Correct answer: D

Explanation

The correct answer is D because enabling two-factor authentication through a RADIUS server is suitable for user prompt requirements, and the Cisco ESA CLI is needed for cluster joining. Options A and C incorrectly suggest using the GUI, which does not meet the requirement, while option B uses TACACS+, which is not the specified requirement for two-factor authentication.