802.1x Concepts and Functionality JN0-650 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In port-based access control, what is the purpose of the uncontrolled port?

   • ATo allow all traffic without authentication
   • BTo provide a secure channel for data after authentication
   • CTo allow only EAPOL authentication traffic to pass before authentication
   • DTo block all traffic from the supplicant
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is a key characteristic of EAP-PEAP?

   • AIt requires client certificates for every authentication.
   • BIt is a non-tunneled method that uses only a username and password.
   • CIt uses a server-side certificate to create a secure tunnel, then authenticates the client inside the tunnel.
   • DIt is a lightweight method that sends passwords in clear text.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A network engineer is setting up 802.1X on a Juniper switch and wants to verify the authentication process. The engineer connects a laptop to a port and observes the following sequence: EAPOL-Start, EAP-Request/Identity, EAP-Response/Identity, and then RADIUS Access-Request. What should happen next in the process?

   • AThe laptop sends an EAPOL-Logoff to terminate the session.
   • BThe switch sends a RADIUS Access-Reject to the laptop.
   • CThe switch immediately opens the port and sends an Access-Accept to the laptop.
   • DThe RADIUS server sends an Access-Challenge to the switch, which forwards it to the laptop as an EAP-Request.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An administrator is configuring a Juniper switch port that connects to an IP phone and a PC behind it. The IP phone does not support 802.1X, but the PC does. The requirement is that the IP phone should be authenticated using its MAC address and placed in a voice VLAN, while the PC should use 802.1X. Which configuration approach should be used?

   • AConfigure the port as a trunk and use 802.1Q tags to separate voice and data.
   • BUse only MAB for both devices, ignoring 802.1X.
   • CEnable 802.1X with MAB as a fallback and configure a voice VLAN.
   • DDisable 802.1X on the port and configure a static voice VLAN.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the role of RADIUS accounting messages in an 802.1X deployment?

   • ATo encrypt the user's credentials
   • BTo initiate reauthentication of the user
   • CTo dynamically assign VLANs to authenticated users
   • DTo track network usage and session statistics for billing or auditing
   Reveal Solution Discussion Select an answer first