Question

An engineer is configuring an LDAP identity store on Cisco ISE to authenticate users against a third-party directory. Security policy requires that all directory traffic be encrypted and that ISE validate the LDAP server's identity before binding. In the LDAP identity source configuration, which combination of settings meets these requirements?

Accepted Answer

Enable Secure Authentication (LDAPS) on port 636 and assign a trusted CA certificate under the Connection settings to validate the server certificate

Answer

Use the default plaintext connection on port 389 and enable password-based admin access for the bind account

Answer

Configure the connection on port 389 and enable Anonymous Access so no bind credentials are exchanged in clear text

Answer

Enable Secure Authentication on port 3268 and rely on the Global Catalog to encrypt attribute retrieval