Question 600
An enterprise network designer recommends: Choose an explicit deny action for the supported server-fail fallback behavior. Which situation most clearly calls for this action?
Explanation
Correct Answer
This case requires the Server failure deny action. A backend outage does not automatically grant sensitive network access.
Incorrect Answers
This other case would be better matched to Use the supported server-reject VLAN policy for failed responsive authentications. Rejected credentials can cause restricted access distinct from silent guest VLAN behavior.
This other case would be better matched to Assign the nonresponsive eligible client to a restricted guest VLAN under the supported access policy. A non-supplicant can receive limited network service without full corporate access.
This other case would be better matched to Set a deliberate server-fail fallback policy such as a restricted server-fail VLAN where supported. Authentication-server outages produce a defined access decision rather than unpredictable open access.