Access Assurance JN0-750 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which protocol is commonly used to integrate Juniper Mist Access Assurance with an external identity provider such as Active Directory?

   • AHTTP
   • BNTP
   • CLDAP
   • DSNMP
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A university uses Juniper Mist Access Assurance with Azure AD as its identity provider. Faculty members authenticate via PEAP-MSCHAPv2, and the IT team wants to enforce a policy that grants full network access only to faculty whose Azure AD account is a member of the 'Faculty-Enabled' group. The Mist portal is already integrated with Azure AD. What must the administrator configure to ensure the group membership is available for policy evaluation?

   • AIn the Azure AD integration settings, enable the 'Group Membership' sync option and map the 'Faculty-Enabled' group to a Mist user group.
   • BUse a certificate-based authentication profile instead of PEAP-MSCHAPv2 to include group membership in the certificate.
   • CCreate a local Mist user account for each faculty member and assign them to the 'Faculty-Enabled' group manually.
   • DConfigure the RADIUS server to send the 'Faculty-Enabled' group as a RADIUS attribute in the Access-Accept message.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company uses Juniper Mist Access Assurance with RADIUS authentication. The network administrator notices that some users are able to authenticate, but they are not receiving the correct VLAN assignment. The VLAN is supposed to be assigned based on the user's group membership. What is the most likely reason for the incorrect VLAN assignment?

   • AThe APs are not configured with the correct RADIUS server IP address.
   • BThe RADIUS server is not sending the Tunnel-Private-Group-ID attribute in the Access-Accept message.
   • CThe users are connecting to the wrong SSID.
   • DThe user's device does not support 802.1X.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A retail chain offers guest Wi-Fi in its stores. The marketing team wants guests to authenticate via a captive portal that requires them to enter a promotional code provided at the checkout. The IT team needs to configure this in Mist Access Assurance. What should they configure to meet this requirement?

   • AUse a RADIUS-based authentication method for the guest SSID and require guests to enter their email address.
   • BCreate a guest access policy with a captive portal that uses a pre-shared key as the authentication method.
   • CConfigure a guest access policy with a captive portal that uses 'Sponsor Approval' as the authentication method.
   • DSet up a guest access policy with a captive portal that uses 'Guest Code' as the authentication method and upload the promotional codes.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A global company uses Juniper Mist Access Assurance with Azure AD as its identity provider. The company has offices in multiple regions, and users authenticate via PEAP-MSCHAPv2. Recently, users in the Asia-Pacific region have been experiencing slow authentication times. The Mist logs show that RADIUS requests to Azure AD are taking longer than expected. What is the most likely cause of the slow authentication?

   • AThe users in the Asia-Pacific region are using incorrect credentials.
   • BThe Mist APs in the Asia-Pacific region are not configured with the correct RADIUS server.
   • CThe network latency between the Mist cloud and the Azure AD endpoint is high due to the geographic distance.
   • DThe Azure AD tenant is configured with a conditional access policy that requires multi-factor authentication.
   Reveal Solution Discussion Select an answer first