200-301 · Question #458
Which access layer threat-mitigation technique provides security based on identity?
The correct answer is C. 802.1x. 802.1X is an access layer threat-mitigation technique that provides security by authenticating devices or users based on their identity before granting network access.
Question
Which access layer threat-mitigation technique provides security based on identity?
Options
- ADynamic ARP Inspection
- Busing a non-default native VLAN
- C802.1x
- DDHCP snooping
How the community answered
(24 responses)- C96% (23)
- D4% (1)
Why each option
802.1X is an access layer threat-mitigation technique that provides security by authenticating devices or users based on their identity before granting network access.
Dynamic ARP Inspection (DAI) prevents ARP spoofing and poisoning attacks by validating ARP packets, which is a layer 2 security feature but not directly based on user/device identity for network access.
Using a non-default native VLAN helps mitigate VLAN hopping attacks, but it is a VLAN security practice, not an identity-based access control mechanism.
802.1X is a port-based network access control protocol that provides a means of authenticating devices connected to a LAN port. It secures the access layer by allowing network access only to authorized devices or users, effectively providing security based on identity.
DHCP snooping prevents rogue DHCP servers and protects the integrity of the DHCP process by validating DHCP messages, which is a layer 2 security feature but not based on identity for network access.
Concept tested: Access layer security (802.1X)
Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/security/configuration_guide/b_sec_3se_3850_cg/b_sec_3se_3850_cg_chapter_010.html
Topics
Community Discussion
No community discussion yet for this question.