CCNA: Cisco Certified Network Associate — Question 344

Which access layer threat-mitigation technique provides security based on identity?

Answer options

• A. Dynamic ARP Inspection
• B. DHCP snooping
• C. 802.1x
• D. using a non-default native VLAN

Correct answer: C

Explanation

The correct answer is C, 802.1x, which provides port-based network access control by authenticating users and devices based on their identity. Options A and B, Dynamic ARP Inspection and DHCP snooping, focus on protecting against specific network attacks rather than identity-based security. Option D, using a non-default native VLAN, is a best practice for segmentation but does not inherently provide identity-based security.