When a wired client connects to an edge switch in a Cisco SD-Access fabric, which component decides whether the client has access to the network?
A. edge node
B. Identity Services Engine
C. RADIUS server
D. control-plane node
When a wired client connects to an edge switch in a Cisco SD-Access fabric, which component decides whether the client has access to the network?
A. edge node
B. Identity Services Engine
C. RADIUS server
D. control-plane node
Question is:
“which component decides whether the client has access to the network?”
ISE is deploying the Radius no question about that.
But does ISE allow the the user in network? Or Radius?
If ISE then we dont need Radius then. But ISE is not doing authentication it is Radius doing that.
ISE is then deploying policies and other functions.
So The provided answer is correct
B is the most complete answer since you would need ISE anyway, so why not use it as a RADIUS server as well?
Answer should be B
Yes, it’s a poor question if asked that way since both are technically correct. ISE is of course a radius server, and you can leverage a third party radius server + ISE for SDA. If they had used creative wording then maybe they were trying to trick you, you can’t run SDA with only a third party radius server, you still need ISE.
I think
Answer: B