Access Assurance JN0-253 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In Juniper Mist Access Assurance, what is the role of an external RADIUS server?

   • ATo authenticate users and devices and return authorization attributes
   • BTo provide the user interface for configuring access policies
   • CTo store and manage client certificates
   • DTo forward traffic between the access point and the internet
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A multinational corporation is deploying Juniper Mist Access Assurance across its offices. The security team requires that all devices authenticate via 802.1X, but the operations team has a legacy device that only supports MAC Authentication Bypass. The security team is concerned that MAB is less secure. What is the best way to address this concern while still supporting the legacy device?

   • AUse MAB for all devices to ensure consistency.
   • BUse MAB for the legacy device but restrict its access to a separate VLAN with limited network permissions.
   • CDisable network access for the legacy device until it can support 802.1X.
   • DRequire the legacy device to be upgraded to support 802.1X.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A manufacturing company wants to implement network access control for its factory floor. The environment has a mix of IoT sensors that do not support 802.1X and employee tablets that do. The company wants to ensure that only authorized devices can connect to the network. What is the primary role of Juniper Mist Access Assurance in this scenario?

   • ATo provide a centralized policy engine that authenticates and authorizes both IoT sensors and employee tablets based on their capabilities.
   • BTo provide a guest management portal for visitors to self-register their devices.
   • CTo replace the need for a RADIUS server by performing all authentication locally on the Mist access points.
   • DTo provide a firewall that filters traffic between the IoT sensors and the employee tablets.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A hospital is deploying Juniper Mist Access Assurance for its nursing stations. Nurses use Windows laptops that support 802.1X, but the medication-dispensing carts are headless devices that only support MAC-based authentication. The security team requires that both device types authenticate before gaining network access. What should you configure in Juniper Mist to meet this requirement?

   • AEnable only MAC Authentication Bypass in the access policy and rely on the Windows firewall to secure the laptops.
   • BCreate a single access policy that uses 802.1X for all devices and enable MAC Authentication Bypass as a fallback for the carts.
   • CConfigure the RADIUS server to send a MAC Authentication Bypass request for all devices, ignoring the 802.1X supplicant.
   • DCreate two separate access policies: one for 802.1X and one for MAC Authentication Bypass, and assign each policy to a different SSID.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In Juniper Mist, what is the purpose of uploading a client certificate to the Mist cloud?

   • ATo allow the Mist cloud to authenticate clients on behalf of the RADIUS server
   • BTo enable EAP-TLS authentication by providing the certificate chain to the access points
   • CTo encrypt the management traffic between Mist and the access points
   • DTo replace the need for a RADIUS server
   Reveal Solution Discussion Select an answer first