8.2 Implement Access Point Authentication (including 802.1X) 300-430 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When configuring 802.1X on a Cisco access point, which interface typically needs to have 802.1X enabled?

   • AThe console interface used for local administrative access
   • BThe management interface that connects to the wireless LAN controller
   • CThe radio interface that provides wireless service to clients
   • DThe uplink Ethernet interface that connects to the wired network
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network administrator is troubleshooting 802.1X authentication failures for Cisco APs. The APs are configured to use EAP-TLS with certificates issued by an internal CA. The RADIUS server logs show that the server certificate is valid, but the client certificate is being rejected. What is the most likely cause?

   • AThe client certificate has expired or is not trusted by the RADIUS server.
   • BThe RADIUS server certificate is not trusted by the AP.
   • CThe RADIUS shared secret is incorrect.
   • DThe AP is using the wrong EAP type.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company is deploying EAP-TLS for AP authentication. The APs are configured with the RADIUS server's certificate for validation. During a pilot, an AP fails to authenticate, and the RADIUS logs show a certificate validation error. What is the most likely cause?

   • AThe RADIUS server's shared secret is incorrect.
   • BThe AP's IP address is not in the RADIUS server's client list.
   • CThe AP's wireless interface is disabled.
   • DThe AP does not trust the CA that issued the RADIUS server certificate.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   In an 802.1X authentication deployment for Cisco access points, which component acts as the authenticator?

   • AThe wireless LAN controller that manages the access point's configuration
   • BThe access point that relays authentication messages between the client and the RADIUS server
   • CThe client device that initiates authentication by presenting credentials
   • DThe RADIUS server that validates the client's credentials
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary purpose of installing a certificate on an access point for 802.1X authentication?

   • ATo encrypt the wireless data traffic between the client and the access point
   • BTo allow the access point to join the wireless LAN controller securely
   • CTo provide a secure channel for the client to download firmware updates
   • DTo authenticate the access point to the RADIUS server and support EAP methods that require server certificates
   Reveal Solution Discussion Select an answer first