Exam 350-701 topic 1 question 72 discussion

A is correct

The command to globally enable 802.1x authentication on the switch, use the dot1x system-auth-control command in Global Configuration mode. https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb5635-configure-global-802-1x-properties-on-a-switch-through-the-c.html

To enable 802.1X globally, use the dot1x system-auth-control command in switch configuration mode. To restore the default configuration, use the no form of this command. dot1x system-auth-control

I will go with A Step 3. To globally enable 802.1x authentication on the switch, use the dot1x system-auth-control command in Global Configuration mode. https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-business-300-series-managed-switches/smb5635-configure-global-802-1x-properties-on-a-switch-through-the-c.html

A is the answer, no doubt

B is answer, https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_usr_8021x/configuration/xe-3se/3850/sec-user-8021x-xe-3se-3850-book/config-ieee-802x-pba.html D - only enable AAA not 802.1x

The following example shows how to enable IEEE 802.1X and AAA on Fast Ethernet port 2/1 and how to verify the configuration: Note In this example the Ethernet interface is configured as an access port by using the switchport mode access command in interface configuration mode. The Ethernet interface can also be configured as a trunk port using the switchport mode trunk command in interface configuration mode. Device> enable Device# configure terminal Device(config)# dot1x system-auth-control Device(config)# aaa new-model Device(config)# aaa authentication dot1x default group radius Device(config)# interface fastethernet2/1 Device(config-if)# switchport mode access Device(config-if)# authentication port-control auto Device(config-if)# dot1x pae authenticator Device(config-if)# end "A" looks like correct answer

correct answer is D "aaa new-model" https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/10384-security.html