Authentication Process Flow JN0-650 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A Juniper switch is configured for 802.1X with a RADIUS server. A user's device connects and the authentication process begins. The RADIUS server sends an Access-Challenge message to the switch. What does the switch do with this message?

   • AIt forwards the Access-Challenge to the supplicant as an EAPOL-Request.
   • BIt drops the Access-Challenge and sends an EAPOL-Success to the supplicant.
   • CIt sends a RADIUS Access-Request back to the server to confirm the challenge.
   • DIt transitions the port to the authorized state because the challenge indicates success.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A network administrator is analyzing a packet capture of an 802.1X authentication. The capture shows the following sequence: EAPOL-Start, EAPOL-Request/Identity, EAPOL-Response/Identity, RADIUS Access-Request, RADIUS Access-Challenge, EAPOL-Request, EAPOL-Response, RADIUS Access-Request, RADIUS Access-Accept, EAPOL-Success. What is the purpose of the RADIUS Access-Challenge in this sequence?

   • AIt requests additional credentials or information from the supplicant.
   • BIt is used to terminate the session.
   • CIt indicates that the authentication was successful and the port should be authorized.
   • DIt indicates that the RADIUS server is rejecting the authentication.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A network engineer is troubleshooting a newly deployed 802.1X setup on an access switch. A user's laptop is connected to a port configured with dot1x port-control auto. The laptop has a valid supplicant installed, but the port remains in the unauthorized state and the user cannot reach the network. The switch logs show EAPOL frames being sent from the switch to the laptop, but no EAPOL response is received. What is the most likely cause of this issue?

   • AThe RADIUS server is unreachable from the switch.
   • BThe laptop's NIC is not sending EAPOL-Start frames.
   • CThe port is in the authenticating state and waiting for the RADIUS Access-Accept.
   • DThe supplicant on the laptop is not configured to respond to EAPOL requests.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A network engineer is troubleshooting an 802.1X issue on a Juniper switch. A user's device is connected, and the switch sends an EAPOL-Request/Identity. The supplicant responds with an EAPOL-Response/Identity. The switch then sends a RADIUS Access-Request to the server, but the server does not respond. The port remains in the authenticating state. After 60 seconds, the switch sends another EAPOL-Request/Identity. What is the most likely reason for the switch to resend the EAPOL-Request/Identity?

   • AThe RADIUS server is not responding, and the switch is retrying the authentication process.
   • BThe supplicant sent an EAPOL-Logoff, and the switch is restarting the authentication.
   • CThe RADIUS server sent an Access-Reject, and the switch is retrying with a different identity.
   • DThe switch is configured with a short reauthentication timer, causing it to reauthenticate the user.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A network administrator is reviewing the RADIUS configuration on a Juniper switch. The switch is configured to use a RADIUS server for 802.1X authentication. During a test, the supplicant sends its credentials, and the RADIUS server responds with an Access-Accept message. What does the switch do upon receiving this message?

   • AIt drops the Access-Accept and keeps the port in the unauthorized state because the RADIUS server did not include a VLAN assignment.
   • BIt immediately sends an EAPOL-Success frame to the supplicant and transitions the port to the authorized state.
   • CIt sends an EAPOL-Request/Challenge to the supplicant to confirm the Access-Accept.
   • DIt sends a RADIUS Access-Request back to the server to verify the Access-Accept.
   Reveal Solution Discussion Select an answer first