A logistics firm is enabling 802.1X on its IBNS 2.0 switches. Voice phones with PCs behind them must authenticate with 802.1X, printers must fall back to MAB, each accepted endpoint must receive its own VLAN, SGT and dACL from ISE, and phones must keep working if ISE is unreachable. Which switch configuration approach satisfies all four requirements?
Select an answer to reveal the explanation.
Short Explanation
You build the port behaviour from reusable pieces, and the service template is the bundle ISE asks the switch to apply when the login succeeds. VLAN, SGT and dACL all ride together, so every endpoint gets its own settings while the critical template keeps voice traffic moving during an ISE outage. It's one label with several settings, easy to swap and reuse.
Full Explanation
IBNS 2.0 builds port behaviour from reusable pieces, and the service template is the bundle the switch applies on a successful authentication event, so the access VLAN, the scalable group tag and a downloadable ACL arrive from ISE and every endpoint receives its own values. Multi-domain host mode lets an IP phone and the PC behind it authenticate with 802.1X while printers fall back to MAB, and because both paths trigger the same success event one policy serves them all. The critical template applied when the authentication server is unreachable keeps voice traffic flowing during an ISE outage. Multi-domain host mode with the VLAN set in the interface is the hybrid port approach, and it fails because the VLAN, SGT and ACL then come from static switch configuration instead of ISE, so endpoints no longer get their own results. A MAB-only service template is the MAC-authentication approach, and it fails because the PC behind each phone never gets to use 802.1X. Chaining the methods and applying an interface template is the port-settings approach, and it fails because an interface template configures the port itself and cannot carry per-session attributes returned by ISE. Exam caveat: interface templates carry port settings while service templates carry the results ISE returns. Practical check: inspect a live session and confirm the applied template shows VLAN, SGT and ACL.