Exam 350-401 topic 1 question 295 discussion

I strongly suggest Enable AAA Override: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html#anc16 From the Advance tab, enable the Allow AAA Override check box to override the WLC configuration when the RADIUS server returns the attributes needed to place the client on the proper VLAN as shown in the image

The AAA Override option of a WLAN enables you to configure the WLAN for identity networking. It enables you to apply VLAN tagging, Quality of Service (QoS), and Access Control Lists (ACLs) to individual clients based on the returned RADIUS attributes from the AAA server. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

Definitely A. Tested.

A is correct

A, Enable AAA Override

Answer is B: AAA override is automatically enabled when you use ISE NAC on a WLAN. Source: https://content.cisco.com/chapter.sjs?uri=/searchable/chapter/content/en/us/td/docs/wireless/controller/7-5/configuration-guide/b_cg75/b_cg75_chapter_0110000.html.xml

Answer should be A

A Enable AAA Override and Cisco Identity Services Engine (ISE) Assign VLANs features are often used together Enable AAA Override is a feature that allows the authentication, authorization, and accounting (AAA) server to override the VLAN assignment of a user's device. This allows the AAA server, such as Cisco ISE, to assign a specific VLAN to a user's device based on the user's credentials and the policies configured on the AAA server.

The answer is A. On WLC, enable AAA Override parameter using the GUI or CLI. Enabling this parameter allows the controller to accept the attributes returned by the RADIUS server. The controller then applies these attributes to its clients. If you don't turn on the override option the WLC will not accept the attribute that the radius server is sending to the WLC basically the client will not get the dynamic vlan ID. Link below: https://rscciew.wordpress.com/2014/12/20/aaa-override/

The AAA Override option of a WLAN enables you to configure the WLAN for identity networking. It enables you to apply VLAN tagging, Quality of Service (QoS), and Access Control Lists (ACLs) to individual clients based on the returned RADIUS attributes from the AAA server. Extracted from https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/m_configuring_aaa_override.pdf

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html

I just checked - for RADIUS Profiling to function, you need to Tick Allow AAA Override too !! =Broken Question=

as Jheax explained, AAA is the answer, therefore answer A is correct.

Any thoughts for the right answer?

An engineer has configured Cisco ISE to assign VLANs (Profiling has been done) however it is not working because the WLC do not accept the parameters sent by the radius server (ISE). So I would say A is correct.

The answer is 'C', because when you looked at the exhibit, you won't be able to see something related to Radius profiling. You can see 1. AAA override ; 2. NAC state ; & 3. DHCP

Of course C is correct answer because ISE use radius protocol and with ISE you can use profiling