nerdexam
(ISC)2

CISSP · Question #1109

An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which…

The correct answer is D. Install an IEEE 802. 1x bridge for the printers. When devices like printers lack native IEEE 802.1x supplicant capability, an 802.1x bridge (also called an authenticator bridge or proxy) can act as an intermediary to authenticate on their behalf, allowing them to participate in NAC-controlled network segments.

Submitted by kev92· Mar 5, 2026Communication and Network Security

Question

An organization implements Network Access Control (NAC) ay Institute of Electrical and Electronics Engineers (IEEE) 802.1x and discovers the printers do not support the IEEE 802.1x standard. Which of the following is the BEST resolution?

Options

  • AImplement port security on the switch ports for the printers.
  • BImplement a virtual local area network (VLAN) for the printers.
  • CDo nothing; IEEE 802.1x is irrelevant to printers.
  • DInstall an IEEE 802. 1x bridge for the printers.

How the community answered

(51 responses)
  • A
    6% (3)
  • B
    18% (9)
  • C
    10% (5)
  • D
    67% (34)

Why each option

When devices like printers lack native IEEE 802.1x supplicant capability, an 802.1x bridge (also called an authenticator bridge or proxy) can act as an intermediary to authenticate on their behalf, allowing them to participate in NAC-controlled network segments.

AImplement port security on the switch ports for the printers.

Port security on a switch port controls access based on MAC addresses, which can be spoofed and does not integrate with the 802.1x authentication framework required by the NAC policy.

BImplement a virtual local area network (VLAN) for the printers.

Placing printers in a separate VLAN may segment them from the network but does not resolve the 802.1x authentication requirement imposed by NAC, leaving the printers unable to authenticate and gain proper network access.

CDo nothing; IEEE 802.1x is irrelevant to printers.

IEEE 802.1x NAC enforces authentication for all devices on controlled ports, including printers; ignoring the incompatibility would either deny printers network access or require disabling NAC enforcement on those ports, weakening security.

DInstall an IEEE 802. 1x bridge for the printers.Correct

An IEEE 802.1x bridge acts as a supplicant proxy, performing the 802.1x authentication on behalf of non-802.1x-capable devices like printers. This allows the printer to connect to a port protected by NAC without requiring the printer itself to support the EAP authentication process. It maintains the security posture of the NAC implementation while accommodating legacy or limited-capability devices.

Concept tested: 802.1x NAC proxy authentication for non-supplicant devices

Source: https://ieeexplore.ieee.org/document/6197179

Topics

#NAC#802.1x#network security#device integration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full CISSP Practice