Implementing Cisco Enterprise Wireless Networks (ENWLSI) — Question 267

An engineer is setting up a WLAN to work with a Cisco ISE as the AAA server. The company policy requires that all users be denied access to any resources until they pass the validation. Which component must be configured to achieve this stipulation?

Answer options

• A. WPA2 passkey
• B. AAA override
• C. CPU ACL
• D. preauthentication ACL

Correct answer: D

Explanation

The correct answer is D, preauthentication ACL, as it ensures that users are restricted from accessing resources until they authenticate. The other options, such as WPA2 passkey and AAA override, do not specifically address the need to deny resource access prior to validation, while CPU ACL is not designed for user validation in WLAN scenarios.