300-430 exam dumps

300-430 practice question 281 of 324

Implementing Cisco Enterprise Wireless Networks. Professional level, Cisco. Free question with the correct answer and a full explanation.

300-430 Question 281

Single answer

A user is unable to connect their device to the corporate Wi-Fi network. The network uses 802.1X authentication and is configured to enforce WPA2-Enterprise with a RADIUS server. The user reports seeing an authentication failure message on their device. As a wireless engineer, what is the MOST likely issue, and where should you focus your troubleshooting efforts?

  1. A

    The user's device does not support WPA2-Enterprise.

  2. B

    The RADIUS server's shared secret does not match the one configured on the wireless controller.

  3. C

    The user's credentials are incorrect or have expired.

  4. D

    The access point is broadcasting on an unsupported channel for the user's device.

Show answer and explanation

Correct answer: C

Explanation

An authentication failure message in an 802.1X setup typically points to an issue with the user's credentials. This could be due to incorrect input, expired credentials, or issues with their account on the authentication server. Troubleshooting should begin by verifying the user's credentials and account status on the RADIUS server.

  • A. Incorrect.

    If the user's device does not support WPA2-Enterprise, it would typically fail to recognize the network type or not attempt a connection at all, rather than displaying an authentication failure message.

  • B. Incorrect.

    If the RADIUS server's shared secret does not match, authentication would fail for all users, not just a single user. The issue here is specific to one user.

  • C. Correct.

    An authentication failure message most commonly indicates incorrect credentials or expired credentials in an 802.1X authentication setup. This is the most likely cause, given the scenario.

  • D. Incorrect.

    If the access point were broadcasting on an unsupported channel, the user's device would not see the SSID or would fail to associate with the network, but it would not result in an authentication failure.

Timed practice exam

Take a 300-430 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam