Exam 300-430 topic 1 question 125 discussion

Incorrect should be D: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_01101000.pdf Choose Wireless > Access Points > Global Configuration to open the Global Configuration page. Under 802.1x Supplicant Credentials, select the 802.1x Authentication check box. In the Username text box, enter the username that is to be inherited by all access points that join the controller.

For an Access Point (AP) to use 802.1X to authenticate to the wired infrastructure, the supplicant credentials must be configured on the Global Configuration page of the Wireless LAN Controller (WLC). The AP acts as a supplicant in this scenario, and it needs credentials (username and password) to authenticate itself to the wired network using the 802.1X protocol. These credentials are typically configured on the WLC and are used by the AP to communicate with a RADIUS server for authentication.

Configure the LAP In this section, you are presented with the information to configure the LAP as a 802.1x supplicant. If the AP is already joined to the WLC, go the Wireless tab and click on the AP, go the Credentials field and under the 802.1x Supplicant Credentials heading, check the Over-ride Global credentials check box in order to set the 802.1x username and password for this AP. https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-fixed/107946-LAP-802-1x.html

RADIUS shared secret would mean the AP is the authenticator, which is not the case. The controller is the authenticator. If we want to authenticate an AP to the wired network, we need ton enable the dot1x supplicant on the AP and provide its authentication credentials