Question 160
A campus AAA deployment has two RADIUS servers, but requests continue timing out because both hostnames resolve to the same failed address. Which immediate engineering change most directly addresses this issue?
Explanation
Correct Answer
The underlying issue is that configured redundancy is illusory when both server entries point to one unavailable destination. This intervention addresses that cause directly. A useful result to confirm is: after one server failure authentication continues through the surviving distinct endpoint.
Incorrect Answers
This is suited to a different condition, such as when a contractor is in the approved directory group but receives employee network privileges because role mapping ignores the account's contractor attribute. The reported fault instead arises because configured redundancy is illusory when both server entries point to one unavailable destination.
This is suited to a different condition, such as when a user moves between wired campus locations and receives inconsistent roles because one access switch uses an older enforcement dictionary. The reported fault instead arises because configured redundancy is illusory when both server entries point to one unavailable destination.
This is suited to a different condition, such as when a corporate certificate was revoked, yet a connected endpoint retains network access indefinitely because no session reauthentication or revocation response occurs. The reported fault instead arises because configured redundancy is illusory when both server entries point to one unavailable destination.