SY0-501 Question #3: Real Exam Question with Answer & Explanation

Question

Multiple organizations operating in the same vertical want to provide seamless wireless access for their employees as they visit the other organizations. Which of the following should be implemented if all the organizations use the native 802.1x client on their mobile devices?

Options

• AShibboleth
• BRADIUS federation
• CSAML
• DOAuth
• EOpenlD connect

Explanation

To provide seamless 802.1x wireless access across multiple organizations, RADIUS federation is the appropriate solution as it allows different RADIUS infrastructures to trust and forward authentication requests to one another.

Common mistakes.

• A. Shibboleth is an open-source project that uses SAML for web-based single sign-on (SSO) and identity federation, not for native 802.1x wireless authentication.
• C. SAML (Security Assertion Markup Language) is an XML-based standard primarily used for exchanging authentication and authorization data between an identity provider and a service provider in web-based scenarios, not for 802.1x.
• D. OAuth (Open Authorization) is an authorization framework for granting access delegation, commonly used for web and API access without sharing user credentials, and is not an authentication protocol for 802.1x.
• E. OpenID Connect is an identity layer built on top of the OAuth 2.0 protocol, primarily used for user authentication in web and mobile applications, not for 802.1x network access.

Concept tested. Federated 802.1x wireless authentication via RADIUS

Reference. https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top

No community discussion yet for this question.