350-701 Practice Question: Secure Network Access, Visibility and Enforcement
Exhibit
interface GigabitEthernet1/0/1 switchport mode access authentication port-control auto authentication periodic authentication timer reauthenticate 3600 dot1x pae authenticator dot1x timeout tx-period 5
Refer to the exhibit. An engineer configures this interface for 802.1X. Users report that after successful authentication, they are forced to reauthenticate every hour even though the authentication session is still active. What configuration change should be made to prevent reauthentication unless triggered by a change?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Remove 'authentication periodic'.
The 'authentication periodic' command enables periodic reauthentication. Removing it with 'no authentication periodic' stops automatic reauthentication, preventing the hourly reauthentication. Option A is incorrect because increasing 'dot1x timeout tx-period' only affects the timeout for initial EAP over LAN (EAPoL) transmissions, not reauthentication intervals. Option B is incorrect because setting 'authentication timer reauthenticate' to 0 would disable periodic reauthentication, but the proper fix is to remove the 'authentication periodic' command to allow reauthentication only on change. Option D is incorrect because 'authentication event server dead action authorize' configures behavior when the RADIUS server is unavailable, which is unrelated to periodic reauthentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increase 'dot1x timeout tx-period' to 60.
Why it's wrong here
The tx-period controls retransmission of EAP packets, not reauthentication frequency.
- ✗
Change 'authentication timer reauthenticate' to 0.
Why it's wrong here
Setting the timer to 0 is not supported; it would likely default to the standard value.
- ✓
Remove 'authentication periodic'.
Why this is correct
Removing this command disables periodic reauthentication.
- ✗
Add 'authentication event server dead action authorize'.
Why it's wrong here
This command handles cases when the RADIUS server is unavailable, not periodic reauthentication.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.