Exam 350-401 topic 1 question 990 discussion

Compatibility between L2 and L3 security methods: Static WEP (L2 security) + web authentication (L3 security) = valid WPA + WPA2 + web authentication = invalid none + web authentication = valid 802.1x + web authentication = invalid To configure the WLC for web authentication: "Click the Layer 2 tab and set the security to None" https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71881-ext-web-auth-wlc.html#:~:text=Click%20the%20Layer%202%20tab%20and%20set%20the%20security%20to%C2%A0None https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/106082-wlc-compatibility-matrix.html#:~:text=are%20more%20secure).-,Wireless%20LAN%20Controller%20Layer%202%20%E2%80%93%20Layer%203%20Security%20Compatibility%20Matrix,-When%20you%20configure

webauth and Raduis are L3 security while L2 is for encryption so since the question is asking for web AND Raduis then WPA2 should be enabled

None: When using web-based authentication and external RADIUS servers, the Layer 2 security mode should be set to "None" or "Open." This allows clients to associate with the SSID without any Layer 2 encryption or authentication, as authentication and encryption are handled at Layer 3 (web-based authentication) and by the RADIUS server, respectively.

B is correct the SSID will be open and have no password, when you try to connect to the SSID you will be directed to a WEB interface where you do the authentication on it based on many options

the answer is "B. NONE" ref: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html

Answer is D: The splash page redirect feature is available only for WLANs that are configured for 802.1x or WPA+WPA2 Layer 2 security.

A is the Answear.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html#toc-hId-2024006454 ^^^ WLAN Configuration Step 3 ^^^

maybe "B" is right because || from OCG p.572 (Open Authentication will be used because the None method has been selected) based on all description that mention AAA , does not require encryption or special security at Layer 2. Instead, it relies on a web page to authenticate users and typically uses RADIUS servers for the actual authentication process. So, for this setup, no Layer 2 security is necessary.

WPA2 (Wi-Fi Protected Access 2) provides strong security for wireless networks. WPAS (Wi-Fi Protected Access with Pre-Shared Key) is a variation of WPA that uses pre-shared keys for authentication