Question 750
During a planned campus-network change at an engineering school in Copenhagen, operators discover that one switch closet authenticates users but the same policy fails on another switch with an incorrect authenticator configuration. The design must preserve lab networks and WLAN testing. What evidence should the engineer request after the repair?
Explanation
Correct Answer
This observation tests the Wired 802.1X supplicant and RADIUS flow requirement at an engineering school in Copenhagen. The expected result is that approved supplicants authenticate and receive the required access role while failed EAP exchanges remain unauthorized. The necessary correction is to configure the access switch as the 802.1X authenticator with a valid RADIUS server and compatible endpoint supplicant/certificate settings; a saved configuration alone would not prove it is working. In this case, the observed fault is that one switch closet authenticates users but the same policy fails on another switch with an incorrect authenticator configuration.
Incorrect Answers
At an engineering school in Copenhagen, this measures a different network requirement, RADIUS returned roles and downloadable policy. The case describes that one switch closet authenticates users but the same policy fails on another switch with an incorrect authenticator configuration, so accepting this result would leave the primary fault without direct verification.
At an engineering school in Copenhagen, this would verify Multi-domain port access, CoA and failure behavior, not the failure reported in this scenario. The requested closure criterion instead concerns Wired 802.1X supplicant and RADIUS flow: approved supplicants authenticate and receive the required access role while failed EAP exchanges remain unauthorized.
At an engineering school in Copenhagen, this measures a different network requirement, MAC authentication fallback and headless devices. The case describes that one switch closet authenticates users but the same policy fails on another switch with an incorrect authenticator configuration, so accepting this result would leave the primary fault without direct verification.