HPE Aruba Certified Professional (ACP) – SD-WAN — Question 94

You have configured 802.1X and MAC authentication in an office environment. During testing, you noticed that devices that don’t support 802.1X take a few minutes to receive an IP address. What can you do to improve the connection time for these devices while maintaining a secure configuration?

Answer options

• A. Disable 802.1X on ports connecting to devices that don’t support it.
• B. Increase the 802.1X EAPOL timeout value on all ports.
• C. Configure auth-precedence to MAC, then 802.1X authentication.
• D. Decrease the MAC auth start value on all ports.

Correct answer: C

Explanation

The correct answer is C because configuring auth-precedence to MAC first allows devices that do not support 802.1X to authenticate quickly using MAC authentication, thus reducing the connection time. Option A would disable 802.1X completely for those ports, compromising security. Option B would only increase the timeout, resulting in longer wait times, and option D does not address the order of authentication methods, which is crucial for improving connection times.