MENU
A network engineer must configure a Cisco ESA to prompt users to enter two forms of information before gaining access The Cisco ESA must also join a cluster machine using preshared keys What must be configured to meet these requirements?
Suggested Answer: B
Get Premium 350-701 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
To connect Cisco Secure Workload to external orchestrators at a client site where incoming connections are not allowed, a reverse tunnel must be used. A reverse tunnel initiates the connection from the inside of the client's network out to the external orchestrator, thereby bypassing restrictions on incoming connections and enabling secure communication.
32 comments · newest first
JE
Jeannine
11 months ago
Wait, are we really using TACACS+ for this? That’s unexpected!
SH
Shaquana
11 months ago
D seems legit, but I prefer CLI for more control.
AN
Annette
11 months ago
C sounds off, TACACS+ isn't typically used for 2FA like that.
MA
Malcom
11 months ago
I think B might be better, GUI is usually easier to manage.
CE
Cecilia
12 months ago
A is the right choice, RADIUS is the way to go for 2FA.
VE
Verdell
12 months ago
I thought TACACS+ was more secure, but I can't remember if it was mentioned for this type of configuration.
VI
Vivan
1 year ago
I feel like the CLI is more common for configurations, but I can't recall if it specifically applies to joining a cluster.
AM
Amber
1 year ago
I think we practiced a similar question where we used RADIUS for two-factor authentication. Does that mean option A or B is correct?
SA
Salley
1 year ago
I remember we discussed two-factor authentication, but I'm not sure if RADIUS or TACACS+ is better for this setup.
AL
Alishia
1 year ago
I've got this! The question is asking us to configure two-factor authentication and join a cluster, so option A is the way to go. RADIUS server for the two-factor, and then use the CLI to join the cluster. Easy peasy!
RO
Rolland
1 year ago
Okay, let me think this through. We need to enable two-factor authentication, and the question specifies that we should use a RADIUS server. Then we need to join the cluster, and the options mention using either the CLI or the GUI. I'm leaning towards option B, but I'll double-check the details.
LI
Ligia
1 year ago
Hmm, I'm a bit confused. Do we need to use TACACS+ instead of RADIUS? And should we be joining the cluster through the CLI instead of the GUI?
EL
Eladia
1 year ago
This question seems straightforward. I think the key is to enable two-factor authentication through a RADIUS server and then join the cluster using the Cisco ESA GUI.
TY
Ty
1 year ago
Preshared keys? That's so 2010. I bet the Cisco ESA has some fancy new way to join the cluster, like fingerprint scanning or voice recognition.
ST
Stephaine
1 year ago
Ha! Entering a bunch of commands in the CLI just to join a cluster? No thanks, I'll stick with the GUI option.
LA
Lavonne
1 year ago
User 3: Yeah, the GUI option is much more user-friendly.
GR
Grover
1 year ago
User 2: You can actually configure the Cisco ESA using the GUI option as well.
JU
Juan
1 year ago
User 1: I agree, CLI can be a hassle sometimes.
QU
Quinn
2 years ago
Hold up, why would I need to configure two-factor authentication? Isn't that overkill for a simple cluster join?
LI
Lili
1 year ago
D: It's better to be safe than sorry when it comes to protecting your network.
CH
Cherry
1 year ago
C: Enabling two-factor authentication is a best practice for securing network access.
AY
Ayesha
1 year ago
B: It's important to protect sensitive information and prevent unauthorized access.
AL
Aleisha
1 year ago
A: Two-factor authentication adds an extra layer of security to ensure only authorized users can access the cluster.
KA
Kallie
2 years ago
Hmm, I'm not sure about TACACS+. Isn't RADIUS the more common authentication protocol for Cisco devices?
SH
Shannan
1 year ago
B) So, we should go with option A for this configuration.
JE
Jeanice
1 year ago
A) That's right, RADIUS is commonly used for authentication.
KI
Kindra
1 year ago
B) RADIUS is indeed more common for Cisco devices.
CA
Carman
1 year ago
A) Enable two-factor authentication through a RADIUS server and then join the cluster by using the Cisco ESA CLI.
OM
Omega
2 years ago
Option B seems like the most straightforward approach. I like the idea of using the GUI to join the cluster.
MA
Margarett
2 years ago
I'm not sure, but I think option B could also work since the GUI can be more user-friendly for some network engineers.
JA
Jannette
2 years ago
I agree with Marti, but I think the CLI might be easier to use for joining the cluster.
MA
Marti
2 years ago
I think the answer is A, because enabling two-factor authentication through a RADIUS server is a common practice for user authentication.