JNCIP-ENT: Juniper Networks Certified Professional – Enterprise Routing (2022) — Question 30

You are enabling 802.1X authentication on an EX Series device. You are configuring the switch in the conference room where you will have non-employees with devices that do not support 802.1X authentication connecting to your network. You must ensure that these users can connect to your network but are restricted to
Internet access only.
What should you do to accomplish this task?

Answer options

• A. You must add a RADIUS account for each user and assign them to the appropriate VLAN.
• B. You should ensure that the server-fail fallback feature is enabled and users are assigned to the appropriate VLAN.
• C. You should assign a guest VLAN to the interfaces and isolate that VLAN to Internet access only.
• D. You should configure a server-reject VLAN to the interfaces and isolate that VLAN to Internet access only.

Correct answer: C

Explanation

The correct answer is C, as assigning a guest VLAN specifically allows non-authenticated users to connect while restricting them to Internet access only. Option A is incorrect because creating RADIUS accounts for each user is not feasible for non-employees. Option B does not directly address the requirement for restricting access, and option D incorrectly implies a server-reject approach, which would not provide the necessary access to the Internet.