300-425 Question 225
Select 3An enterprise network administrator is designing a wireless network where different user groups (employees, guests, and IoT devices) must be assigned to separate VLANs and receive different levels of QoS. Additionally, access control policies must ensure that IoT devices can only communicate with specific servers. Which combination of features should the administrator implement to meet these requirements?
- A
Configure VLAN assignment based on user roles using RADIUS attributes.
- B
Implement QoS profiles mapped to SSIDs for traffic prioritization.
- C
Apply Access Control Lists (ACLs) to restrict IoT device access to specific servers.
- D
Enable WPA3-Enterprise to enhance encryption for all user groups.
- E
Use static VLAN assignment on the wireless controller based on SSID.
Show answer and explanation
Correct answers: A, B, C
Explanation
To implement Identity-Based Networking in this scenario, the administrator must use RADIUS attributes for dynamic VLAN assignment, QoS profiles for traffic prioritization, and ACLs for specific access control. These features ensure the network is segmented based on user identity, prioritizes traffic appropriately, and enforces security policies for IoT devices. Static VLAN assignment and WPA3-Enterprise are not sufficient to meet all the specified requirements.
- A. Correct.
Configuring VLAN assignment based on user roles using RADIUS attributes ensures that users are dynamically assigned to the appropriate VLAN based on their identity, which is essential for separating traffic for employees, guests, and IoT devices.
- B. Correct.
Implementing QoS profiles mapped to SSIDs allows the network to prioritize traffic based on the user group or application type, ensuring better performance for critical services.
- C. Correct.
Applying ACLs to restrict IoT device access to specific servers provides the necessary security to limit IoT devices from accessing unauthorized resources, meeting the requirement for controlled communication.
- D. Incorrect.
While WPA3-Enterprise enhances encryption and overall security, it does not address the requirements for VLAN separation, QoS, or access control for IoT devices.
- E. Incorrect.
Using static VLAN assignment on the wireless controller based on SSID is less flexible and does not meet the requirement for dynamic VLAN assignment based on user identity.