Exam 350-701 topic 1 question 651 discussion

Keyword is 'flex authentication' so you need to setup WebAuth even if you have MAB, EAP, etc. to work, then after that it sends to WebAuth. So yeah, you need WebAuth configured. so answer D is correct.

The IEEE 802.1X Flexible Authentication feature allows for Layer 3 authentication mechanisms (such as web-based or other IP-based mechanisms) in addition to the standard Layer 2 authentication. By configuring MAC Authentication Bypass (MAB), devices that cannot support 802.1X can be redirected to Layer 3 authentication methods such as web authentication or other external methods. 🔹 MAB is used to redirect devices to a Layer 3 device (like a web server or a different authentication service) for authentication when 802.1X authentication fails (or when the device cannot perform Layer 2 authentication). This action is especially useful when integrating non-802.1X-capable devices into a secure network environment where they must be authenticated using Layer 3 mechanisms.

Only D is layer 3

A & C are Layer 2. IEEE 802.1X Flexible Authentication Methods The IEEE 802.1X Flexible Authentication feature supports three authentication methods: dot1X--IEEE 802.1X authentication is a Layer 2 authentication method. mab--MAC-Authentication Bypass is a Layer 2 authentication method. webauth--Web authentication is a Layer 3 authentication method. So, it's D imo.