350-401 Question 181
Select 3A network engineer is deploying a Cisco wireless infrastructure for a large enterprise. The engineer wants to ensure proper segmentation of traffic for employees, guests, and IoT devices to enhance security and simplify policy management. Which combination of wireless configuration elements should the engineer use to achieve this segmentation?
- A
Use tags to assign specific SSIDs to different device groups
- B
Create profiles to define security and QoS policies associated with specific roles
- C
Use groups to logically group access points for different locations or functions
- D
Assign VLANs directly to each wireless client device based on MAC address
- E
Apply tags to dynamically associate policies and profiles to devices based on their function
Show answer and explanation
Correct answers: A, B, E
Explanation
Wireless segmentation in Cisco deployments is achieved through a combination of tags, profiles, and policies. Tags are used to dynamically assign SSIDs and profiles to devices or users, while profiles define specific settings such as security or QoS. This approach enables logical segmentation of traffic for different groups like employees, guests, and IoT devices, enhancing security and simplifying management. Groups, while useful for organizing access points, do not directly contribute to traffic segmentation.
- A. Correct.
Correct. Tags are used to associate devices or users with specific policies or SSIDs, facilitating segmentation based on group assignments.
- B. Correct.
Correct. Profiles allow the configuration of specific settings, such as security and QoS, for a particular role or group, ensuring proper segmentation and management.
- C. Incorrect.
Incorrect. Groups are used to logically organize access points, which is helpful in managing large-scale deployments, but they do not directly impact traffic segmentation.
- D. Incorrect.
Incorrect. Assigning VLANs directly to wireless devices is not scalable or efficient in a dynamic environment and does not leverage Cisco's wireless segmentation capabilities.
- E. Correct.
Correct. Tags are a dynamic method to associate policies and profiles to devices, enabling segmentation based on device function or role.