MAC RADIUS JN0-650 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A switch is configured for MAC RADIUS. The RADIUS server is temporarily down for maintenance. The network administrator wants to ensure that devices connecting during the outage are still granted access to the network. What should be configured?

   • AA fallback authentication method, such as a local user database, that is used when the RADIUS server is unreachable.
   • BA RADIUS retry count of 10 so the switch tries the server multiple times.
   • CA longer RADIUS timeout so the switch waits longer for the server to respond.
   • DA static MAC address entry in the switch's MAC table for each device.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the purpose of configuring a fallback mechanism in MAC RADIUS authentication?

   • ATo automatically disable the interface if authentication fails
   • BTo switch to a different RADIUS server if the primary server is unreachable
   • CTo allow access to devices that fail MAC RADIUS authentication
   • DTo use an alternative authentication method when the primary method fails
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A switch port is configured for MAC RADIUS. A device connects, and the switch sends an Access-Request to the RADIUS server. The server responds with Access-Accept and a VLAN attribute (VLAN ID 100). However, the device ends up in the default VLAN (VLAN 1). What is the most likely cause?

   • AThe switch is not configured to accept the VLAN attribute from RADIUS.
   • BThe RADIUS server is not configured to send the VLAN attribute.
   • CThe device does not support VLAN tagging.
   • DThe switch is using the wrong RADIUS server.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security auditor is reviewing the network access control implementation. They note that MAC RADIUS is used for all devices. The auditor flags this as a security risk. What is the primary security concern with MAC RADIUS?

   • AMAC RADIUS requires a separate RADIUS server for each switch.
   • BMAC addresses can be spoofed, allowing an attacker to impersonate an authorized device.
   • CMAC RADIUS uses PAP, which sends the MAC address in clear text.
   • DMAC RADIUS does not support VLAN assignment.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A port is configured for both 802.1X and MAC RADIUS. A device that supports 802.1X connects but fails EAP-TLS authentication due to an invalid certificate. The engineer expects the device to fall back to MAC RADIUS, but it does not. What is the most likely reason?

   • AThe RADIUS server is rejecting the MAC RADIUS request because the device is already known.
   • BThe switch is configured to use MAC RADIUS only as a fallback for non-802.1X devices, not for failed 802.1X attempts.
   • CThe device's certificate is not trusted by the RADIUS server, so the server sends an Access-Reject that the switch interprets as a signal to try MAC RADIUS.
   • DThe switch only falls back to MAC RADIUS if the device does not respond to 802.1X, not if 802.1X authentication fails.
   Reveal Solution Discussion Select an answer first