Exam CNX-001 topic 1 question 11 discussion

Actual exam question from CompTIA's CNX-001

Question #: 11
Topic #: 1

A network engineer is establishing a wireless network for handheld inventory scanners in a manufacturing company's warehouse. The engineer needs an authentication mechanism for these scanners that uses the Wi-Fi network and works with the company's Active Directory. The business requires that the solution authenticate the users and authorize the scanners. Which of the following provides the best solution for authentication and authorization?

A. TACACS+
B. RADIUS
C. LDAP
D. PKI

Show Suggested Answer

Suggested Answer: B 🗳️

by SuntzuLegacy at May 19, 2025, 2:11 a.m.

Comments

Submit Cancel

SuntzuLegacy

1 month, 1 week ago

Selected Answer: B

Answer: B. RADIUS When integrating Wi-Fi authentication with Active Directory and needing both authentication (who) and authorization (what they are allowed to do), RADIUS is the standard choice. RADIUS servers (such as Microsoft NPS) can authenticate users against Active Directory and apply specific authorization policies for the devices/users. This is especially common for 802.1X/WPA2-Enterprise Wi-Fi networks. TACACS+ is typically used for device administration and not as common for Wi-Fi authentication. LDAP can serve as a directory service for user lookups, but it does not natively provide the AAA framework (authentication, authorization, and accounting) for Wi-Fi. PKI provides certificate services but does not itself handle user authorization.

upvoted 1 times

...