Examkin

Soru

Zorluk: OrtaIdentity and Access Management Architecture

A security architect is designing an enterprise Network Access Control (NAC) architecture to secure corporate wired and wireless infrastructure. The design requires mutual authentication between client devices and the network, along with centralized authentication and authorization against the enterprise identity store. Which of the following components or protocols should be integrated to meet these requirements? (Select TWO.)

  1. A centralized RADIUS server integrated with the enterprise directory service to evaluate network access requests.Cevap
  2. Extensible Authentication Protocol-TLS (EAP-TLS) configured across endpoints and network devices to enable certificate-based mutual authentication.Cevap
  3. C
    An OAuth 2.0 authorization server deployed at network switch ports to issue access tokens for Layer 2 hardware address filtering.
  4. D
    A Security Assertion Markup Language (SAML) web browser profile configured to handle network-layer EAP handshake framing.

Cevap

The correct architecture requires a centralized RADIUS server integrated with enterprise directory services and EAP-TLS protocol configuration for mutual certificate-based authentication.
Implementing a centralized RADIUS server provides the AAA infrastructure required to evaluate access policies and connect to corporate directory services. Combining RADIUS with EAP-TLS satisfies the mutual authentication constraint through two-way X.509 certificate validation during network admission.

Adım Adım Çözüm

1
Determine the protocol capable of performing mutual authentication at the network layer using digital certificates.
EAP-TLS is selected because it requires both client and server X.509 certificates to complete the TLS handshake over IEEE 802.1X.
EAP-TLS fulfills the requirement for mutual cryptographic verification between endpoints and the authentication framework.
2
Identify the architectural server role needed to centralize access requests and interface with the enterprise identity store.
A RADIUS server is selected as the central Authentication, Authorization, and Accounting (AAA) server.
RADIUS acts as an intermediary that evaluates authentication requests from network devices against enterprise directory policies.

Anahtar Kavram

Network Access Control and AAA Architecture (EAP-TLS & RADIUS)
Bu soruyu puanla

Konular

Identity and Access Management Architecture

Bu konudan daha fazla soru