300-320 · Question #319
Which three statements about 802.1X are true?
The correct answer is A. It is IEEE standard B. It can allow and deny port access based on device identity D. It can allow and deny port access based on user identity. 802.1X (Port-Based Network Access Control) is an IEEE standard - specifically IEEE 802.1X-2004 and its revisions. It operates by authenticating a supplicant (client) to an authenticator (switch/AP) using a backend authentication server (typically RADIUS). Because authentication…
Question
Which three statements about 802.1X are true?
Options
- AIt is IEEE standard
- BIt can allow and deny port access based on device identity
- CIt works only with wired devices
- DIt can allow and deny port access based on user identity
How the community answered
(33 responses)- A91% (30)
- C9% (3)
Explanation
802.1X (Port-Based Network Access Control) is an IEEE standard - specifically IEEE 802.1X-2004 and its revisions. It operates by authenticating a supplicant (client) to an authenticator (switch/AP) using a backend authentication server (typically RADIUS). Because authentication can be based on certificates or MAC addresses tied to a device, it supports device-identity-based access control (B). Because it supports EAP methods that carry username/password credentials (EAP-PEAP, EAP-TTLS, etc.), it also supports user-identity-based access control (D). Choice C ('works only with wired devices') is FALSE - 802.1X is widely deployed on wireless networks (Wi-Fi WPA2/WPA3 Enterprise uses 802.1X) and is a core component of wireless NAC solutions.
Topics
Community Discussion
No community discussion yet for this question.