300-710 SNCF Configuration Practice Question
An Identity Policy is configured on the FMC to authenticate users connecting through the FTD. The administrator wants to use Active Directory as the identity source. Which mechanism must be configured to map user IP addresses to usernames without requiring explicit web authentication?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Passive Authentication via AD Agent or ISE
Passive authentication utilizes the Cisco User Agent or Firepower Identity Services Engine (ISE) / AD agent to map IP addresses to usernames transparently.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Captive Portal
Why it's wrong here
Captive portal forces users to explicitly authenticate via a web browser prompt.
- ✓
Passive Authentication via AD Agent or ISE
Why this is correct
Passive authentication monitors directory server logs or agents to map user IP addresses to usernames without user intervention.
- ✗
Local User Database
Why it's wrong here
A local user database is stored directly on the FTD/FMC and does not provide automatic AD mapping.
- ✗
RADIUS Server Authentication
Why it's wrong here
RADIUS is typically used for active network access authentication rather than passive IP-to-user mapping.
About these practice questions
This 300-710 SNCF question is part of Courseiva's 478-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Cisco exam blueprint
This 300-710 SNCF practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-710 SNCF exam.