Study. uk . com
  1. Home
  2. All questions
  3. Question 310

CISSP study material · question 310 of 500

A misconfigured network device sends Access-Requests to a RADIUS server that holds no shared secret for it. What must the server do?

  1. Silently discard the request.
  2. Return an Access-Challenge inviting the device to authenticate.
  3. Return an Access-Reject so the device learns it is unknown.
  4. Log the request and forward it to a proxy server.
Show the answer

Answer: A. Silently discard the request.

RFC 2865 requires the server to validate the sending client and to silently discard a request from a client for which it does not have a shared secret.

Source: RFC 2865 (IETF) — RFC 2865 > 2. Operation

Challenge yourself on this topic → Study as cards