MAC RADIUS JN0-650 Practice Questions (Page 4)

Questions 16–18

1. 16application · medium

   A switch port is configured for MAC RADIUS. A new IP phone is connected, and the engineer wants to trace the authentication process. Which sequence of events correctly describes what happens when the IP phone connects?

   • AThe switch sends an EAPOL-Start to the device, the device responds with its MAC address, and the switch sends a RADIUS Access-Request with the MAC as username and password.
   • BThe switch detects the link up, extracts the source MAC address from the first frame, and sends a RADIUS Access-Request with the MAC as username and password.
   • CThe switch sends a RADIUS Access-Request with the MAC address as the Calling-Station-ID attribute only, and the RADIUS server authenticates based on that attribute.
   • DThe device sends its MAC address in a DHCP request, the switch intercepts it, and forwards it to the RADIUS server for authentication.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which Junos configuration hierarchy is used to specify the RADIUS server for MAC RADIUS authentication?

   • Aset security authentication-server
   • Bset protocols radius
   • Cset access radius-server
   • Dset system radius-server
   Reveal Solution Discussion Select an answer first
3. 18expert · hard

   A company has two RADIUS servers. The primary server (192.0.2.10) is slow but functional, and the secondary (192.0.2.11) is fast. The engineer wants MAC RADIUS to use the primary server, but if the primary does not respond within 3 seconds, it should fail over to the secondary. The engineer also wants to ensure that if the primary recovers, new authentication attempts use it again. What configuration is needed?

   • AConfigure a separate access profile for each server and use a routing policy to direct traffic to the primary.
   • BConfigure the secondary server first in the list, and the primary second, so the switch uses the fast server first.
   • CConfigure both servers in the radius-server list, with the primary first. Set the timeout to 3 seconds. The switch will automatically fail over and recover.
   • DConfigure the primary server with a higher priority value than the secondary.
   Reveal Solution Discussion Select an answer first