A customer wants to use a single SSID to authenticate IoT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Fast Transition (802.11r) is a Wi-Fi amendment designed to improve client roaming speed by reducing re-authentication time, and it does not address the requirement for unique passwords per device on a single SSID.

Central Web Authentication (CWA) uses a web portal for user authentication, typically for guest access, and is not designed for authenticating IoT devices using unique pre-shared keys.

Cisco Centralized Key Management (CCKM) is a Cisco proprietary fast roaming solution that, like 802.11r, focuses on accelerating client re-associations, not on providing unique pre-shared keys per device for authentication on a single SSID.

Identity Pre-Shared Key (IPSK) allows a single SSID to support multiple unique pre-shared keys, where each key can be associated with specific device identities and policies managed by Cisco ISE, fulfilling the requirement for different passwords for IoT devices.