Access Assurance JN0-750 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When configuring a RADIUS server in Juniper Mist, which of the following is typically required to establish a secure communication channel?

   • AAn IPsec tunnel
   • BA username and password
   • CA shared secret
   • DAn SSL certificate
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is using Mist Access Assurance with a RADIUS server for 802.1X. They notice that accounting records are not being sent to the RADIUS server, even though authentication is working. The Mist configuration shows the RADIUS server is set for authentication and accounting. What is the most likely cause?

   • AThe clients are using EAP-TLS, which does not support accounting
   • BThe RADIUS server is configured with a different shared secret for accounting
   • CThe RADIUS server's accounting port (typically 1813) is blocked by a firewall
   • DThe Mist Access Assurance policy is set to 'permit' without accounting
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A university is using Mist Access Assurance with a single RADIUS server for 802.1X authentication. During peak registration week, students report intermittent authentication failures. Mist logs show RADIUS timeouts and occasional 'Access-Reject' responses. The network team suspects the RADIUS server is overwhelmed. Which configuration change in Mist would best address this issue while maintaining high availability?

   • AIncrease the RADIUS retry timeout and retry count in the Mist RADIUS configuration
   • BAdd a second RADIUS server and configure load balancing between the two servers
   • CSwitch to MAC Authentication Bypass for all students to reduce RADIUS traffic
   • DConfigure the RADIUS server to use UDP port 1812 instead of 1813
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to enforce different access policies for employees and contractors on the same SSID. Employees should have full network access, while contractors should only have internet access. They are using Mist Access Assurance with Active Directory. How should they configure this?

   • ACreate two separate SSIDs, one for employees and one for contractors
   • BCreate two access policies based on user group membership, and assign different VLANs or firewall rules to each group
   • CUse a single policy that allows full access for all users
   • DUse MAC Authentication Bypass to differentiate employees and contractors
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has a mix of devices: some support 802.1X, and some do not. They want to use a single SSID for all devices, but they want to enforce different policies based on the authentication method used. How can they achieve this in Mist Access Assurance?

   • ACreate two separate SSIDs, one for 802.1X devices and one for MAB devices
   • BUse only MAC Authentication Bypass for all devices
   • CConfigure both 802.1X and MAC Authentication Bypass on the same SSID, and create policies that differentiate based on the authentication method
   • DUse only 802.1X and require all devices to support it
   Reveal Solution Discussion Select an answer first