Exam 300-430 topic 1 question 13 discussion

Answer is correct. B is about authentication, not about switching the traffic.

To meet the requirements of dynamically assigning groups of users to specific IP subnets and ensuring that traffic is offloaded locally if the subnet is available at the remote site (or tunneled back to the WLC if the subnet is unavailable), the VLAN-based central switching feature is used. VLAN-based central switching: This feature allows the FlexConnect Access Point (AP) to determine whether to switch traffic locally or tunnel it back to the Wireless LAN Controller (WLC) based on the VLAN assigned to the client. If the VLAN (and corresponding subnet) is available at the remote site, traffic is switched locally. If the VLAN is not available, traffic is tunneled back to the WLC.

I do believe C is correct. This is about switching traffic. When a user is in the process of being authenticated he isn't switched to a different subnet UNTIL after he is authenticated, so I don't think option b is correct.

C When a WLAN is locally switched in flex and a VLAN is configured on the AP side, the traffic is switched locally. When a VLAN is not defined in an AP, the VLAN drops the packet. When VLAN-based central switching is enabled, the corresponding AP tunnels the traffic back to the controller. The controller then forwards the traffic to its corresponding VLAN. https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-12/config-guide/b_wl_16_12_cg/flexconnect.html

FlexConnect local authentication is a feature that allows FlexConnect APs to authenticate clients locally and assign them IP addresses from a subnet that is available at the remote site. If the subnet assigned to the client is unavailable at the remote site, the traffic is tunneled back to the WLC.

B is correct

C. is correct.

The correct answer is B. FlexConnect local authentication. FlexConnect local authentication allows the WLC to offload authentication and authorization of clients to the local AP in FlexConnect mode. This means that the AP at the remote site can dynamically assign groups of users to specific IP subnets based on their authentication and authorization status, and then locally offload the traffic for those subnets. If a subnet is not available at the remote site, the AP can tunnel the traffic back to the WLC for central processing.

provided answer is correct