A customer wants wired authentication across CX switches and needs to authenticate a single computer connected through a VoIP phone. Which feature should be enabled?

A customer wants wired authentication across CX switches and needs to authenticate a single computer connected through a VoIP phone. Which feature should be enabled?

• A. Multi-Domain Authentication
• B. Device-Based Mode
• C. MAC Authentication
• D. Multi-Auth Mode

Answer: (A)

Multi-Domain Authentication is the right choice when a single switch port needs to support two devices—a VoIP phone and a computer behind it. This feature lets the port operate with two separate authentication domains, so each device can be authenticated independently (for example, the phone in a voice/domain and the PC in a data/domain) and placed into its appropriate VLAN. This is exactly what’s needed to secure wired access for a PC connected through a VoIP phone without requiring a second physical port. Other options don’t provide the same per-device, multi-domain capability. Device-Based Mode is about classifying devices rather than supporting two distinct authenticated endpoints on one port. MAC Authentication would rely on MAC-based access in a single domain and doesn’t natively handle the two-domain, per-device VLAN separation. Multi-Auth Mode allows multiple devices on a port but doesn’t establish separate authentication domains for each device, so it doesn’t suit the VoIP-plus-PC scenario as effectively.

Multi-Domain Authentication is the right choice when a single switch port needs to support two devices—a VoIP phone and a computer behind it. This feature lets the port operate with two separate authentication domains, so each device can be authenticated independently (for example, the phone in a voice/domain and the PC in a data/domain) and placed into its appropriate VLAN. This is exactly what’s needed to secure wired access for a PC connected through a VoIP phone without requiring a second physical port.

Other options don’t provide the same per-device, multi-domain capability. Device-Based Mode is about classifying devices rather than supporting two distinct authenticated endpoints on one port. MAC Authentication would rely on MAC-based access in a single domain and doesn’t natively handle the two-domain, per-device VLAN separation. Multi-Auth Mode allows multiple devices on a port but doesn’t establish separate authentication domains for each device, so it doesn’t suit the VoIP-plus-PC scenario as effectively.