Explain Access Management Principles 100-160 Practice Questions (Page 8)

Questions 36–38

1. 36expert · hard

   A university is deploying a new wireless network across three campuses. The IT team wants to use a single RADIUS server for authentication, but the network team is concerned about a single point of failure. They also want to enforce a password policy that blocks common passwords. Which approach best addresses both concerns?

   • ADeploy two RADIUS servers in a failover configuration and configure both to use the same backend directory with a password policy that blocks common passwords.
   • BUse a single RADIUS server and rely on the access points to cache authentication results.
   • CUse one RADIUS server but increase its hardware specifications to handle the load.
   • DConfigure each access point with its own local password policy.
   Reveal Solution Discussion Select an answer first
2. 37application · medium

   A university has multiple buildings, each with its own wireless access points. The IT team wants to centralize authentication so that students can use the same username and password across all buildings, and the team wants a single log of all access attempts. Which solution should they implement?

   • AConfigure each access point with its own local user database.
   • BDeploy a RADIUS server that all access points use for authentication and accounting.
   • CSet up a VPN server and require students to connect before using Wi-Fi.
   • DUse a shared password for all students and enable logging on each access point.
   Reveal Solution Discussion Select an answer first
3. 38application · medium

   An organization's password policy currently requires 8 characters and no other restrictions. After a security assessment, the team decides to implement a policy that reduces the risk of credential stuffing attacks. Which policy change would be most effective?

   • ARequire password changes every 30 days.
   • BRequire a minimum length of 14 characters and block the use of passwords found in known breach lists.
   • CRequire at least one uppercase letter, one number, and one symbol.
   • DDisable account lockout to avoid user frustration.
   Reveal Solution Discussion Select an answer first