Access Assurance JN0-750 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the primary role of Access Assurance in a Juniper Mist distributed enterprise network?

   • ATo automatically optimize Wi-Fi radio frequencies and power levels for better coverage
   • BTo securely tunnel all user traffic to a centralized data center for inspection
   • CTo enforce network access policies for users and devices based on identity and context
   • DTo provide a cloud-based dashboard for monitoring network performance and analytics
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A law firm uses Juniper Mist Access Assurance with Okta as its identity provider. The firm wants to grant different levels of network access based on the user's role: partners get full access, associates get internal access only, and interns get internet-only access. The roles are defined as Okta groups. What is the most efficient way to configure this in Mist?

   • ACreate three separate SSIDs, one for each role, and configure different policies for each SSID.
   • BUse a single policy that grants full access to all users and rely on the firewall to restrict access based on IP addresses.
   • CIntegrate Okta with Mist, sync the Okta groups, and create three access policies that match each group with the appropriate access level.
   • DCreate local Mist user accounts for each employee and manually assign them to the appropriate access policy.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A corporation uses Juniper Mist Access Assurance with EAP-TLS. The certificates are issued by an internal CA, and the root CA certificate has been uploaded to the Mist certificate profile. Recently, some users with new certificates are unable to authenticate, while users with older certificates work fine. The new certificates are issued by a different intermediate CA. What is the most likely cause of the authentication failures?

   • AThe new certificates are not trusted by the client devices.
   • BThe new certificates have expired.
   • CThe intermediate CA certificate for the new certificates has not been uploaded to the Mist certificate profile.
   • DThe users with new certificates are entering incorrect passwords.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A financial services firm requires certificate-based authentication for all employees connecting to the corporate Wi-Fi. The certificates are issued by an internal CA and are already deployed to all company laptops. The Mist Access Assurance configuration must validate the certificate chain and ensure that only certificates issued by the internal CA are accepted. What is the correct way to configure this in the Mist portal?

   • ACreate a policy that checks for the presence of any certificate in the device's certificate store.
   • BConfigure the RADIUS server to accept any certificate presented by the client without validation.
   • CUse PEAP-MSCHAPv2 with the certificate as an outer tunnel, but do not configure any CA validation.
   • DUpload the internal CA certificate to the Mist Access Assurance certificate profile and select 'Validate certificate chain'.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the purpose of an access policy in Juniper Mist Access Assurance?

   • ATo define the VLANs used for management traffic
   • BTo set the password for the Mist portal administrator account
   • CTo configure the radio frequency channels used by access points
   • DTo define which users or devices are allowed to access the network and what resources they can use
   Reveal Solution Discussion Select an answer first