350-401 Question 184
Select 3A network administrator is configuring a Cisco wireless network to ensure proper segmentation for different user groups. The administrator decides to use tags, profiles, and groups to simplify policy application and maintain security. Which combination of these components ensures that specific wireless traffic is isolated and assigned the correct resources?
- A
Using policy tags to map WLANs to specific APs
- B
Applying RF profiles to groups of APs to optimize frequency settings
- C
Configuring site tags to group APs based on location or function
- D
Creating access control policies for each user group and applying them to policy groups
- E
Assigning VLAN tags to WLANs to ensure traffic segmentation
Show answer and explanation
Correct answers: A, C, E
Explanation
Wireless segmentation in Cisco networks involves the use of tags, profiles, and groups to manage and isolate traffic. Policy tags ensure that WLANs are broadcast on the correct APs, site tags group APs by purpose or location, and VLAN tagging ensures traffic is segmented as it transitions to the wired network. These elements work together to isolate traffic and apply appropriate policies, maintaining both performance and security.
- A. Correct.
Policy tags map WLANs to specific APs, ensuring the correct SSIDs are broadcast on the appropriate access points, which is critical for traffic segmentation.
- B. Incorrect.
RF profiles are primarily used to optimize frequency and radio settings, but they are not directly responsible for traffic isolation or segmentation.
- C. Correct.
Site tags group APs based on their location or function, enabling better management and policy enforcement, which contributes to traffic segmentation.
- D. Incorrect.
Access control policies are important for security but are applied at the user level, not directly tied to wireless segmentation using groups, profiles, or tags.
- E. Correct.
VLAN tags assigned to WLANs ensure that traffic from different wireless networks is segmented and handled appropriately in the wired network.