In the 802.1x authentication scenario of a certain WLAN network, the authorized static ACL configuration on the authentication device is as follows. Which of the following network segments can be…

Question

Options

• A10.1.3.0/24
• B10.1.2.0/24
• C10.1.1.0/24
• D10.1.4.0/24

• A
  15% (3)
• B
  5% (1)
• C
  75% (15)
• D
  5% (1)

Explanation

In 802.1x static ACL scenarios, the authentication device enforces access by permitting only the network segment explicitly listed in the authorized ACL - here, the ACL permits traffic to 10.1.1.0/24, making option C the only reachable segment for authenticated clients. Options A (10.1.3.0/24), B (10.1.2.0/24), and D (10.1.4.0/24) are not listed as permitted destinations in the static ACL, so traffic toward those segments is implicitly denied by the ACL's default-deny behavior. A key concept to remember is that static ACLs in 802.1x are allowlists - anything not explicitly permitted is blocked, regardless of authentication status. Memory tip: Think of the ACL as a "guest pass" that names only the room you're allowed to enter; being authenticated gets you through the door, but the pass (ACL) still restricts where you can go inside.

No community discussion yet for this question.