Cisco CCNP Security Core (SCOR) 350-701Endpoint Security and Secure Network AccessMedium
A network security team is deploying a new wireless network and needs to ensure secure access for both corporate devices and guests. Corporate devices must use 802.1X with certificates for authentication, while guests should use a web-based portal. Which secure network access technology provides the flexibility to support both authentication methods from a single wireless infrastructure?
- APre-Shared Key (PSK) with MAC Filtering
- BWireless Intrusion Prevention System (WIPS)
- COpen Authentication with Captive Portal
- D802.1X with Centralized Authentication Server
Show answer & explanationAnswer & explanation
Correct answer: D. 802.1X with Centralized Authentication Server
802.1X with a centralized authentication server (like RADIUS/Cisco ISE) can support multiple authentication methods, including certificate-based (EAP-TLS) for corporate devices and web authentication for guests, providing the required flexibility from the same infrastructure.
Why the other options are wrong
- A. PSK with MAC filtering is static and doesn't offer the dynamic, identity-based flexibility needed for both corporate and guest access.
- B. WIPS focuses on detecting and preventing wireless threats, not on providing flexible authentication methods for legitimate users.
- C. Open authentication with a captive portal is primarily for guest access and doesn't provide the strong, certificate-based 802.1X authentication required for corporate devices.
Flexible Wireless Access
The ability of a wireless network to support diverse authentication and authorization methods for different user groups (e.g., corporate, guest) from a single infrastructure.
- Often achieved using 802.1X with a central RADIUS server.
- Allows for dynamic VLAN assignment based on user/device identity.
- Supports methods like EAP-TLS, PEAP, and Web Authentication.
Memory trick: To serve all, the Wi-Fi 'gatekeeper' needs a flexible ID system.