6.4 Implement Identity-Based Networking on Different Wireless Architectures (VLANs, QoS, ACLs) 300-430 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In an 802.1X authentication flow, which device acts as the authenticator in a wireless network?

   • AThe DHCP server
   • BThe wireless client (supplicant)
   • CThe RADIUS server
   • DThe wireless LAN controller (WLC)
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company is deploying wireless in an SD-Access fabric. Users authenticate via 802.1X and must be placed in a specific virtual network (VN) and scalable group (SGT) based on their identity. Which mechanism is used to enforce identity-based policy in this architecture?

   • AThe WLC uses a local policy profile to assign the client to a VN based on the SSID.
   • BThe client is assigned a static VLAN on the WLAN and the switch enforces the policy.
   • CThe fabric WLAN is mapped to a VN, and ISE returns an SGT that is used for group-based policy enforcement.
   • DThe WLC applies a downloadable ACL to the client's traffic based on the RADIUS attribute.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   A wireless client fails 802.1X authentication. Which log should you examine first to determine the cause?

   • ARADIUS server logs (e.g., ISE logs)
   • BAccess point system logs
   • CDNS server logs
   • DDHCP server logs
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A company uses a Catalyst 9800 controller and ISE. Voice clients must receive higher QoS priority than data clients on the same SSID. ISE has been configured to return the appropriate QoS attributes. The administrator has enabled AAA Override on the WLAN. What else must be configured to ensure the QoS policy is applied?

   • AConfigure the WLAN with a static QoS profile and apply it to all clients.
   • BUse the WLAN's per-SSID QoS setting and assign it to the voice VLAN.
   • CConfigure the switch port to trust the DSCP value from the phone.
   • DEnsure the QoS attributes are included in the RADIUS Access-Accept for voice clients.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which Cisco wireless architecture embeds the wireless controller functionality directly into the access switch, allowing for distributed data forwarding?

   • AConverged access with an embedded wireless controller on a Catalyst 9000 switch
   • BCentralized architecture with a standalone WLC
   • CCloud-managed architecture with Meraki
   • DSD-Access with fabric mode
   Reveal Solution Discussion Select an answer first