Question 740
At a manufacturing complex in Detroit, engineers report that a device attempts EAP-TLS without the identity certificate required by the wired policy. The work affects production and maintenance endpoints. Which post-change observation is the strongest acceptance evidence?
Explanation
Correct Answer
This observation tests the Wired 802.1X supplicant and RADIUS flow requirement at a manufacturing complex in Detroit. The expected result is that approved supplicants authenticate and receive the required access role while failed EAP exchanges remain unauthorized. The necessary correction is to configure the access switch as the 802.1X authenticator with a valid RADIUS server and compatible endpoint supplicant/certificate settings; a saved configuration alone would not prove it is working. In this case, the observed fault is that a device attempts EAP-TLS without the identity certificate required by the wired policy.
Incorrect Answers
At a manufacturing complex in Detroit, this would verify RADIUS returned roles and downloadable policy, not the failure reported in this scenario. The requested closure criterion instead concerns Wired 802.1X supplicant and RADIUS flow: approved supplicants authenticate and receive the required access role while failed EAP exchanges remain unauthorized.
At a manufacturing complex in Detroit, the observation may be useful for a separate MAC authentication fallback and headless devices test, but it does not establish that a device attempts EAP-TLS without the identity certificate required by the wired policy has been resolved. The relevant check is the Wired 802.1X supplicant and RADIUS flow outcome.
At a manufacturing complex in Detroit, this measures a different network requirement, Multi-domain port access, CoA and failure behavior. The case describes that a device attempts EAP-TLS without the identity certificate required by the wired policy, so accepting this result would leave the primary fault without direct verification.