6.4 Implement Identity-Based Networking on Different Wireless Architectures (VLANs, QoS, ACLs) 300-430 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A hospital uses a centralized WLC (Cisco 9800) with CAPWAP and ISE. They have two groups of users: doctors and nurses. Doctors must be placed in VLAN 30, and nurses in VLAN 20. Both groups authenticate via 802.1X. The ISE authorization policies are correctly configured. However, some doctors are being placed in VLAN 20. What is the most likely cause?

   • AThe doctors' supplicants are not configured to request the correct VLAN.
   • BThe WLC has a static VLAN configured for the SSID that overrides the RADIUS-returned VLAN.
   • CThe doctors' AD group membership is not correctly mapped in the ISE authorization policy, or the policy order is incorrect.
   • DThe WLC is not configured with 'AAA Override' enabled.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a key advantage of the converged access architecture (e.g., Catalyst 9800 embedded) over centralized architectures for identity-based networking?

   • AIt allows for local switching, reducing the need to backhaul all client traffic to a central controller
   • BIt provides stronger encryption than centralized architectures
   • CIt eliminates the need for RADIUS authentication
   • DIt allows clients to roam without any authentication
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which protocol is used between the access point and the wireless LAN controller in a centralized architecture to carry client traffic?

   • AVXLAN
   • BCAPWAP
   • CLISP
   • DOTV
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which authentication method is used for devices that do not support 802.1X supplicants, such as printers or IoT sensors?

   • AWPA2-PSK
   • BWeb authentication (guest access)
   • CMAC Authentication Bypass (MAB)
   • DEAP-TLS
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of identity-based networking in a wireless environment?

   • ATo encrypt all wireless traffic using WPA3-Enterprise
   • BTo apply network policies based on the authenticated identity of the user or device rather than only on the physical port or IP address
   • CTo replace the need for a RADIUS server by using local switchport authentication
   • DTo ensure all wireless clients receive the same VLAN and ACL regardless of who they are
   Reveal Solution Discussion Select an answer first