Examkin

Question

Difficulty: MediumTroubleshooting Mobile OS Security and Connectivity Issues

A network administrator recently updated the security certificate on the RADIUS server used for corporate 802.1X Wi-Fi authentication. Shortly after, several employees report that their corporate-managed smartphones continuously fail to connect to the secure Wi-Fi network and keep prompting for authentication. Devices on the unauthenticated guest Wi-Fi network are unaffected. Which TWO of the following actions should the technician take to resolve the mobile connectivity issue?

  1. Push the updated Root CA certificate to the managed mobile devices using the MDM portal.Answer
  2. Update or re-enroll the enterprise wireless network profile on the affected mobile devices.Answer
  3. C
    Contact the cellular service provider to report a localized network outage.
  4. D
    Reconfigure the corporate wireless network to use WPA2-Personal (PSK) instead of WPA2-Enterprise.
  5. E
    Perform a remote factory reset on all affected mobile devices.

Answer

Deploy the updated Root CA certificate via MDM and update/re-enroll the enterprise Wi-Fi network profile on the affected mobile devices.
When a RADIUS server's SSL/TLS certificate is updated, mobile devices using 802.1X authentication will reject the connection until they possess the updated Root CA certificate and their wireless payload profile is updated to explicitly trust the new certificate authority. Distributing the certificate via MDM and updating the network profile resolves the authentication prompts cleanly.

Step-by-Step Solution

1
Identify the cause of the authentication failure.
Recognize that updating the RADIUS server certificate breaks trust on client devices if they lack the corresponding updated Root CA certificate or trust settings in their Wi-Fi profile.
802.1X EAP-TLS/PEAP authentication requires mobile devices to validate the server certificate against a trusted Certificate Authority (CA).
2
Deploy the required trust assets to the mobile devices.
Use the Mobile Device Management (MDM) server to push the new Root CA certificate to all enrolled devices.
MDM allows centralized distribution of security payloads and certificates without manual user intervention.
3
Refresh the wireless network configuration profile.
Update or re-enroll the corporate Wi-Fi profile on the smartphones so the OS accepts the new RADIUS server certificate.
Mobile operating systems cache wireless profile trust settings, which must be refreshed to establish network association.

Key Concept

802.1X Mobile Wi-Fi Authentication and MDM Certificate Payload Deployment
Estimated Time:1m 30s
Rate this question

Topics

Troubleshooting Mobile OS Security and Connectivity Issues

More questions from this topic