As the Chief Information Security Officer (CISO) at a large university, you are responsible for the security of a campus-wide Wi-Fi network that serves thousands of students, faculty, and staff. Recen

Network segmentation isolates network segments but does not address the issue of unauthorized access *within* a segment caused by shared credentials.

Deploying a VPN encrypts traffic and can provide secure remote access, but it doesn't solve the problem of users sharing their Wi-Fi login credentials for initial network access.

Regularly changing Wi-Fi passwords is a good security practice but does not prevent users from sharing the *new* password once it is set, nor does it provide individual accountability.

802.1X is an authentication standard that provides port-based network access control, requiring users to authenticate before gaining network access. This standard supports centralized authentication mechanisms like RADIUS, allowing individual user credentials to be validated, thereby preventing shared passwords from granting unauthorized access and providing traceability for each user session.