Cisco Certified Internetwork Expert (CCIE) Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Enhance your networking skills with the Cisco Certified Internetwork Expert Test. Tackle challenging questions and get detailed explanations. Prepare effectively to excel in your CCIE certification exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which three VSA attributes can be in a RADIUS WLAN Access-accept packet?

  1. EAP-Message

  2. Tunnel-Type

  3. LEAP Session-Key

  4. SSID

The correct answer is: LEAP Session-Key

The presence of LEAP Session-Key as a VSA (Vendor-Specific Attribute) in a RADIUS WLAN Access-accept packet is associated with the specific requirements of the LEAP (Lightweight EAP) authentication method. When a wireless client successfully authenticates using LEAP, the RADIUS server sends an Access-accept packet that includes the LEAP Session-Key to establish a secure session between the client and access point. This key is essential for ensuring the confidentiality and integrity of data transmissions during the session, reinforcing the importance of this attribute in the context of RADIUS responses. In contrast, while EAP-Message, Tunnel-Type, and SSID may play roles in various authentication and session establishment processes, they are not defined specifically as attributes that would normally be present in an Access-accept packet for WLAN scenarios related to LEAP. For instance, the EAP-Message is more commonly found in EAP-related exchanges rather than in the final Access-accept packet, while Tunnel-Type is associated with tunneling protocols and not exclusive to the WLAN context. The SSID is relevant for the identification of the wireless network but is typically included in other contexts, such as in Access Challenge messages, rather than in the Access-accept packet itself.