Question 960
A campus AAA deployment has two RADIUS servers, but requests continue timing out because both hostnames resolve to the same failed address. Which first diagnostic check is most useful before changing the network?
Explanation
Correct Answer
This check collects evidence at the layer implicated by the symptom: configured redundancy is illusory when both server entries point to one unavailable destination. Examine the evidence before choosing the corrective change.
Incorrect Answers
This would be a reasonable check when a guest sponsor approves a visitor account, but the NAC policy still maps the visitor to the expired guest role, but is less direct for the issue at hand: configured redundancy is illusory when both server entries point to one unavailable destination.
This would be a reasonable check when a corporate certificate was revoked, yet a connected endpoint retains network access indefinitely because no session reauthentication or revocation response occurs, but is less direct for the issue at hand: configured redundancy is illusory when both server entries point to one unavailable destination.
This would be a reasonable check when staff Wi-Fi clients have correct certificates but the RADIUS server cannot see authentication requests after a network ACL update, but is less direct for the issue at hand: configured redundancy is illusory when both server entries point to one unavailable destination.