Multiple Authentication Methods JN0-650 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary role of a RADIUS server in a multiple authentication method configuration?

   • ATo host the captive portal web page
   • BTo validate credentials for methods such as MAC RADIUS and 802.1X
   • CTo assign IP addresses to authenticated clients
   • DTo store the authentication-order configuration
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company has a Junos switch port configured with 802.1X as the primary method and MAC RADIUS as a fallback. A new employee's laptop has a supplicant but the user enters incorrect credentials. The authentication fails. What happens next on the Junos switch?

   • AThe switch blocks the port and does not attempt any other authentication method.
   • BThe switch retries 802.1X authentication automatically after a short delay.
   • CThe switch falls back to MAC RADIUS and attempts to authenticate the laptop's MAC address.
   • DThe switch falls back to captive portal to allow the user to authenticate via a web browser.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A network administrator is configuring a Junos switch port that will connect to a conference room. The port must support 802.1X for corporate laptops, MAC RADIUS for legacy printers, and captive portal for guest devices. The administrator wants to ensure that corporate laptops always authenticate via 802.1X, even if they have a MAC address that is also registered in the RADIUS server. What is the default authentication precedence on Junos?

   • A802.1X, then MAC RADIUS, then captive portal
   • BMAC RADIUS, then 802.1X, then captive portal
   • CThe precedence is determined by the RADIUS server and can vary per client.
   • DCaptive portal, then 802.1X, then MAC RADIUS
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which log message would indicate that a client failed 802.1X authentication and is falling back to MAC RADIUS?

   • ARADIUS server unreachable
   • BInterface link down
   • CFallback to mac-radius due to dot1x failure
   • DClient MAC address not found
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A hospital deploys a new access layer for patient rooms. The network team must support three device types: IP phones (which do not support 802.1X), nurse workstations (which support 802.1X), and guest tablets (which have no supplicant). The team wants a single interface configuration that authenticates each device with the appropriate method without manual port changes. Which Junos authentication approach should they use?

   • AConfigure captive portal as the primary method and 802.1X as a fallback for all devices.
   • BConfigure 802.1X as the only authentication method, and enable MAC RADIUS as a fallback for devices that fail 802.1X.
   • CConfigure MAC RADIUS as the primary method and 802.1X as a fallback, so all devices are authenticated by MAC address first.
   • DCreate a separate VLAN for each device type and configure a different authentication method per VLAN.
   Reveal Solution Discussion Select an answer first