Refer to the CLI output below: What statement about the output above is correct?

Question

Exhibit

Options

• AThe port-access role was configured with gateway-role visitor.
• BThe downloadable role was configured for gateway-role visitor.
• CThe client authenticated using dot1x.
• DThe secondary tunnel endpoint IP is 10.10.10.151

• A
  82% (40)
• B
  4% (2)
• C
  2% (1)
• D
  12% (6)

Explanation

Option A is correct because the CLI output shows a locally defined port-access role (configured directly on the switch/controller) that references the gateway-role named "visitor" - these are two distinct concepts, and the output confirms the port-access role is what's in use with that gateway-role association.

Option B is wrong because a downloadable role is dynamically pushed from a RADIUS server during authentication, not locally configured; the output indicates a port-access (local) role, not a downloadable one. Option C is incorrect because the authentication method shown in the output reflects MAC authentication (or another method), not 802.1X (dot1x), which would display different identifiers. Option D is wrong because the IP address listed as the secondary tunnel endpoint in the output does not match 10.10.10.151 - that value is a distractor likely referencing the primary or a completely unrelated address.

Memory tip: Think "port-access = configured on the port (local), downloadable = delivered from RADIUS." If the output shows a role tied to the switch config rather than a RADIUS attribute, it's always a port-access role - and check whether the gateway-role name matches exactly before picking an answer.

No community discussion yet for this question.