300-370 · Question #29
Refer to the exhibit. A client reports being unable to log into the wireless network According to the output, which network information should be verified?
The correct answer is A. the Failed Attempts log on the authentication server. When an authentication server logs a 'Failed Attempts' message for a client, the most appropriate next step is to consult the server's detailed logs to identify the specific reason for the authentication denial.
Question
Refer to the exhibit. A client reports being unable to log into the wireless network According to the output, which network information should be verified?
Exhibit
Options
- Athe Failed Attempts log on the authentication server
- Bthat the AP has IP connectivity to the authentication server
- Cthat the user has an account on the authentication server
- Dthat the authentication and accounting configuration are correct
How the community answered
(47 responses)- A74% (35)
- B4% (2)
- C15% (7)
- D6% (3)
Why each option
When an authentication server logs a 'Failed Attempts' message for a client, the most appropriate next step is to consult the server's detailed logs to identify the specific reason for the authentication denial.
Given that the authentication server has logged a 'Failed Attempts' message, it confirms the client's request reached the server and was processed. Examining the detailed 'Failed Attempts' log on the authentication server will provide the specific reason for the denial, such as incorrect credentials, an expired account, or a policy violation, which is crucial for troubleshooting.
If the AP did not have IP connectivity to the authentication server, the authentication request would not reach the server, and consequently, the server would not log a failed attempt.
While ensuring a user account exists is fundamental, if a 'Failed Attempt' is logged, the server has already processed the request, and the specific account-related issue (if any) will be detailed within that log entry.
The immediate issue is an authentication failure; while overall configuration correctness is important, reviewing the specific 'Failed Attempts' log directly addresses the reported problem more efficiently than a general check of all configurations.
Concept tested: Troubleshooting client authentication failures using authentication server logs
Source: https://www.cisco.com/c/en/us/td/docs/security/ise/2-3/admin_guide/b_ise_admin_guide_23/b_ise_admin_guide_23_chapter_0100.html
Topics
Community Discussion
No community discussion yet for this question.
