Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 210

An engineer is adding a Cisco DUO solution to the current TACACS+ deployment using Cisco ISE. The engineer wants to authenticate users using their account when they log into network devices. Which action accomplishes this task?

Answer options

• A. Configure Cisco DUO with the external Active Directory connector and tie it to the policy set within Cisco ISE.
• B. Install and configure the Cisco DUO Authentication Proxy and configure the identity source sequence within Cisco ISE.
• C. Modify the current policy with the condition MFA: SourceSequence:DUO=true in the authorization conditions within Cisco ISE.
• D. Create an identity policy within Cisco ISE to send all authentication requests to Cisco DUO.

Correct answer: B

Explanation

The correct answer is B because installing and configuring the Cisco DUO Authentication Proxy is necessary to enable integration with Cisco ISE for user authentication. The other options either involve unnecessary steps or incorrectly describe the configuration needed to authenticate users effectively through Cisco DUO.