350-701 Practice Question: In a Cisco ISE 802.1X deployment, which component…

In a Cisco ISE 802.1X deployment, which component acts as the authenticator?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Authenticator (switch/WLC)

The authenticator is the network device (switch or wireless LAN controller) that enforces authentication before granting access.

Answer analysis

For each option: why learners choose it and why it is or isn't the right answer here.

✗
RADIUS server
Why it's wrong here
RADIUS server is another term for the authentication server, not the authenticator.
✗
Authentication server (ISE)
Why it's wrong here
ISE is the authentication server that validates credentials.
✗
Supplicant (client software)
Why it's wrong here
The supplicant is the client software on the endpoint requesting access.
✓
Authenticator (switch/WLC)
Why this is correct
The authenticator is the network device that mediates authentication between supplicant and server.

Quick reference

Protocol	Port(s)	Encryption	Transport	Primary Use
RADIUS	1812 / 1813	Password only	UDP	Network access control
TACACS+	49	Full packet	TCP	Device administration
Diameter	3868	Full session	TCP / SCTP	Carrier / mobile networks
802.1X	—	EAP-based	Layer 2	Port-based access control

TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.

Go deeper