Question 790
During a planned campus-network change at an engineering school in Copenhagen, operators discover that an operator checks Access-Accept only and overlooks the missing authorization policy on the port. The design must preserve lab networks and WLAN testing. Which test result most directly confirms the required behavior?
Explanation
Correct Answer
This observation tests the RADIUS returned roles and downloadable policy requirement at an engineering school in Copenhagen. The expected result is that authenticated clients inherit the intended role and its actual VLAN or service ACL rather than merely reporting RADIUS success. The necessary correction is to map authorized RADIUS attributes or ClearPass downloadable roles to the switch policy and VLAN assignment; a saved configuration alone would not prove it is working. In this case, the observed fault is that an operator checks Access-Accept only and overlooks the missing authorization policy on the port.
Incorrect Answers
At an engineering school in Copenhagen, this would verify Wired 802.1X supplicant and RADIUS flow, not the failure reported in this scenario. The requested closure criterion instead concerns RADIUS returned roles and downloadable policy: authenticated clients inherit the intended role and its actual VLAN or service ACL rather than merely reporting RADIUS success.
At an engineering school in Copenhagen, the observation may be useful for a separate MAC authentication fallback and headless devices test, but it does not establish that an operator checks Access-Accept only and overlooks the missing authorization policy on the port has been resolved. The relevant check is the RADIUS returned roles and downloadable policy outcome.
At an engineering school in Copenhagen, this would verify Multi-domain port access, CoA and failure behavior, not the failure reported in this scenario. The requested closure criterion instead concerns RADIUS returned roles and downloadable policy: authenticated clients inherit the intended role and its actual VLAN or service ACL rather than merely reporting RADIUS success.