Which two Cisco Catalyst switch interface commands allow only a single voice device and a single data device to be connected to the IEEE 802.1X-enabled interface? (Choose two.)
A. authentication host-mode single-host
B. authentication host-mode multi-domain
C. authentication host-mode multi-host
D. authentication host-mode multi-auth
Answer AB
question is to allow only single device.
When migrating from Cisco Discovery Protocol bypass to next-generation authentication bypass, if single or multi-host mode is used with an IP phone and one or more data devices, then move to multi-authentication mode with next-generation authentication bypass with the advantage of visibility.
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst2960x/software/15-0_2_EX/security/configuration_guide/b_sec_152ex_2960-x_cg/b_sec_152ex_2960-x_cg_chapter_010000.html
Single-host will only allow either the phone or data device. Multi-domain is clearly the answer. The only other possible answer would be multi-auth as this would allow both a phone and a data device. However, more than one phone and data device could potentially authenticate. I would have to go with B and D.