Q17Security Fundamentals
Which Cisco Wireless LAN Controller feature, when enabled, limits management access to only specific networks?
← → navigate · a answer
Community votes
Discussion · 10
24
I don't remember if this was ever explained in Wendell Odom? But I am sure I have not come across this topic on Netacad......
6
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109669-secure-wlc.html#t4
6
The AI is not always right..
5
SMH about wanting to talk to the main CPU.. I guess after all the other choices, x marks the spot!
B 4
Selected Answer: B
ACLs can only be applied to dynamic interfaces. In WLC firmware version 4.0, there are CPU ACLs that can filter traffic destined for the management interface. (You can only configure CPU ACLs via GUI or CLI).
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html
3
For any traffic to the CPU, for example, management protocols such as SNMP, HTTPS, SSH, Telnet, or network services protocols such as Radius or DHCP, use a “CPU ACL”
2
any official link to explain the answer ?
2
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/71978-acl-wlc.html
C 1
Selected Answer: C
C. Flex ACL (Access Control List)
Explanation:
Flex ACL, also called FlexConnect Access Control List, is a feature on the Cisco Wireless LAN Controller that lets you enforce access control policies for management access to the controller from specific networks. By configuring Flex ACL, you can define rules that decide which networks are allowed or denied access to manage the controller.
The other options are not directly related to restricting management access from specific networks:
A. TACACS (Terminal Access Controller Access Control System) is a security protocol used for centralized authentication, authorization, and accounting (AAA) services.
B. CPU ACL (Central Processing Unit Access Control List) is a feature that lets you apply access control policies to control traffic destined for the CPU of a network device.
D. RADIUS (Remote Authentication Dial-In User Service) is a networking protocol that provides centralized authentication, authorization, and accounting for remote access and network services.
C 1
Selected Answer: C
The feature on the Cisco Wireless LAN Controller that, when enabled, restricts management access from specific networks is:
C. Flex ACL
Flex ACLs (Access Control Lists) offer better control for defining which management access methods (like SSH or HTTP) are allowed from different networks.