1Y0-253 · Question #127
Which two pieces of information are needed to create the Authentication Policy for RADIUS? (Choose two.)
The correct answer is B. Secret Key E. IP address of the RADIUS server. See the full explanation below for the reasoning.
Question
Which two pieces of information are needed to create the Authentication Policy for RADIUS? (Choose two.)
Options
- ABase DN
- BSecret Key
- CSSL Certificate
- DRADIUS User Group name
- EIP address of the RADIUS server
How the community answered
(36 responses)- A3% (1)
- B75% (27)
- C8% (3)
- D14% (5)
Community Discussion
7
Yusuf A.May 8, 2026The correct answers are B and E, the Secret Key and the IP address of the RADIUS server. My senior walked me through this on a NetScaler lab last month, and those two fields are literally the first things the RADIUS server action form asks for, because the appliance needs to know where to send the authentication request and then prove it is a trusted client using the shared secret. Base DN trips a lot of people up because they associate it with directory lookups, but that field belongs to LDAP configuration, not RADIUS. The RADIUS User Group name comes into play later for authorization policies, not for standing up the Authentication Policy itself.
Kemal J.May 10, 2026Yusuf has the two fields right, but worth adding that if the shared secret mismatches even by one character the RADIUS server silently drops the access-request and NetScaler logs show a generic timeout, which sends half the room chasing firewall rules when the CDF trace would have shown the answer in thirty seconds.
Kemal J.May 10, 2026The "Authentication Policy" framing trips people up because they conflate it with the RADIUS server profile config, but strip that away and you need exactly two things to point NetScaler at your RADIUS box and shake hands with it, the shared Secret Key and the IP address of the RADIUS server. Option D is a trap because the User Group name belongs to the authorization side after authentication already happened, not to the policy itself.
Viktor S.May 23, 2026First instinct was D because the word "group" makes you think NetScaler needs to know where to put the user, but that is confusing policy creation with authorization config that comes later. The authentication policy itself is just the NetScaler saying "go ask this RADIUS server, and prove you're allowed to talk to it." For that you need the IP address so the box knows where to send the Access-Request packet, and you need the Secret Key because RADIUS authentication is built on a shared secret between the client (NetScaler) and the server, full stop. Base DN is pure LDAP territory, SSL cert is for LDAP over TLS or client cert auth, so if those showed up on your shortlist you need to spend more time on the protocol basics before you memorize anything else.
Prof. SaraJun 14, 2026Correct, B and E, the RADIUS server IP targets traffic and the shared secret authenticates it.
Giselle K.Jun 9, 2026C and E, SSL cert locks the channel, IP targets the server.
Viktor S.Jun 10, 2026Giselle, the IP-based control is C, which is not in the answer set here, so swap that out for B, because B covers the certificate authentication piece that actually verifies server identity rather than just the transport layer. B and E is the correct pair.