When configuring UBT on a switch, what happens if a gateway role is not specified?

When configuring UBT on a switch, what happens if a gateway role is not specified?

• A. The switch will put the client on the access VLAN
• B. The gateway will assign a default role to the client
• C. The switch will assign the default deny role to the client
• D. The gateway will send back the deny role to the client

Answer: (A)

When no gateway role is provided, the switch keeps the endpoint in the untrusted path by placing it on the access VLAN. This default behavior ensures the device remains in the basic, unprotected segment until proper policy or authentication can take place, rather than trying to route it through a specific gateway path without explicit guidance. In other words, without a gateway role, there’s no gateway path to assign a particular posture or VLAN, so the switch assigns the endpoint to the access VLAN. The other options imply gateway involvement or a specific deny action that isn’t triggered simply by omitting the gateway role.

When no gateway role is provided, the switch keeps the endpoint in the untrusted path by placing it on the access VLAN. This default behavior ensures the device remains in the basic, unprotected segment until proper policy or authentication can take place, rather than trying to route it through a specific gateway path without explicit guidance.

In other words, without a gateway role, there’s no gateway path to assign a particular posture or VLAN, so the switch assigns the endpoint to the access VLAN. The other options imply gateway involvement or a specific deny action that isn’t triggered simply by omitting the gateway role.