Question 770
During a planned campus-network change at an engineering school in Copenhagen, operators discover that a network team incorrectly treats a MAC address assertion as cryptographic proof of user identity. The design must preserve lab networks and WLAN testing. Which post-change observation is the strongest acceptance evidence?
Explanation
Correct Answer
This observation tests the MAC authentication fallback and headless devices requirement at an engineering school in Copenhagen. The expected result is that headless endpoints receive only their authorized resource access and 802.1X-capable users still meet the stronger identity requirement. The necessary correction is to apply approved MAC authentication for devices without 802.1X while limiting the resulting role and keeping higher-assurance access for capable clients; a saved configuration alone would not prove it is working. In this case, the observed fault is that a network team incorrectly treats a MAC address assertion as cryptographic proof of user identity.
Incorrect Answers
At an engineering school in Copenhagen, the observation may be useful for a separate RADIUS returned roles and downloadable policy test, but it does not establish that a network team incorrectly treats a MAC address assertion as cryptographic proof of user identity has been resolved. The relevant check is the MAC authentication fallback and headless devices outcome.
At an engineering school in Copenhagen, this measures a different network requirement, Multi-domain port access, CoA and failure behavior. The case describes that a network team incorrectly treats a MAC address assertion as cryptographic proof of user identity, so accepting this result would leave the primary fault without direct verification.
At an engineering school in Copenhagen, the observation may be useful for a separate Wired 802.1X supplicant and RADIUS flow test, but it does not establish that a network team incorrectly treats a MAC address assertion as cryptographic proof of user identity has been resolved. The relevant check is the MAC authentication fallback and headless devices outcome.