Cisco ISE Low-Impact Mode: Access Denied in Phased Deployment

Access Denied in Phased Deployment

Question

An engineer is using the low-impact mode for a phased deployment of Cisco ISE and is trying to connect to the network prior to authentication.

Which access will be denied in this deployment?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

In the low-impact mode of Cisco ISE, endpoints are allowed to access the network prior to authentication, but their access is limited. In this mode, only critical services are allowed while other services are denied until the endpoint is authenticated.

The critical services that are allowed in low-impact mode include DHCP, DNS, and HTTP/HTTPS. Therefore, options A, B, and D are not the correct answer.

EAP (Extensible Authentication Protocol) is used for authenticating the endpoints on the network. In low-impact mode, EAP is denied until the endpoint is authenticated, which means that access to the network will be denied if EAP authentication is required before granting access.

Therefore, the correct answer to the question is option C, EAP.