Exam 300-430 topic 1 question 260 discussion

Actual exam question from Cisco's 300-430

Question #: 260
Topic #: 1

Refer to the exhibit. An engineer receives a report that a client cannot authenticate via phone in a secure WLAN. The phone uses Layer 2 Security WPA2, and other clients can authenticate successfully. The engineer issues the (CONTROLLER) >debug client 64:89:9a:31:7f:a1 and (CONTROLLER) >debug aaa all enable commands in the controller and sees this output. What are two sources of this issue? (Choose two.)

A. An invalid user account or password was used.
B. RADIUS is incorrectly configured
C. The server certificate is expired or not in use
D. Certificate services are not working properly.
E. The incorrect EAP method was configured on the client device.

Show Suggested Answer

Suggested Answer: AB 🗳️

by Le91 at Oct. 30, 2024, 5:37 p.m.

Comments

Submit Cancel

rrahim

4 months, 1 week ago

Selected Answer: AB

he debug output shows that the RADIUS server is sending an Access-Reject message for the client with MAC address 64:89:9a:31:7f:a1. This indicates that the authentication request was rejected by the RADIUS server. Here are the two most likely sources of the issue: A. An invalid user account or password was used: The RADIUS server may have rejected the authentication request because the username or password provided by the client is incorrect. This is a common cause of Access-Reject messages. B. RADIUS is incorrectly configured: The RADIUS server might be misconfigured, such as having the wrong shared secret, incorrect IP address, or incorrect port settings on the Wireless LAN Controller (WLC). This can prevent successful communication between the WLC and the RADIUS server.

upvoted 1 times

rrahim

4 months, 1 week ago

Why the Other Options Are Incorrect: C. The server certificate is expired or not in use: This would typically result in a different error, such as a failure to establish a TLS handshake for EAP-TLS or PEAP. The debug output does not indicate a certificate-related issue. D. Certificate services are not working properly: Similar to Option C, this would result in a certificate-related error, which is not evident in the debug output. E. The incorrect EAP method was configured on the client device: If the wrong EAP method were configured, the RADIUS server would likely reject the request with a specific error related to the EAP method mismatch. The debug output does not indicate this type of issue.

upvoted 1 times

...

Le91

8 months ago

Selected Answer: AB

Possible reasons: Invalid user account and/or password Computer not a member of domain, issue on AD side. Certificate services not working properly Server Certificate expired or not in use RADIUS incorrectly configured Access key incorrectly entered - it IS case-sensitive (so is the SSID) update Microsoft patches. EAP timers. Incorrect eap method configured on client/server. Client certificate is expired or not in use.

upvoted 1 times

...