Mitigating Credential Sharing with 802.1X Authentication
As the Chief Information Security Officer (CISO) at a large university, you are responsible for the security of a campus-wide Wi-Fi network that serves thousands of students, faculty, and staff. Recently, there has been a rise in reports of unauthorized network access, and you suspect that some users are sharing their login credentials. You are considering deploying an additional layer of security that could effectively mitigate this issue. What would be the most suitable measure to implement in this context?
Community Votes
100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The exam tests the distinction between shared password networks and individualized authentication mechanisms, with the trap being the assumption that changing passwords or segmentation solves the identity problem.
This question addresses securing a campus Wi-Fi network against credential sharing by implementing port-based network access control. The correct solution is 802.1X authentication, which ties network access to individual user identity.
Candidates often choose A (Network Segmentation) because it isolates traffic, but segmentation does not prevent one user from handing their credentials to another within the same segment.
Community Discussion (4 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Implementing 802.1X authentication is the most suitable measure because it provides port-based network access control that requires individual user credentials for each connection. Unlike static shared passwords, 802.1X uses an authentication server (typically RADIUS) to verify each user's identity uniquely, making it difficult to share valid login credentials effectively since each session is tied to a specific authenticated user.Why the Other Options Are Wrong
Network segmentation (A) divides the network into subnets but does not inherently authenticate individual users; shared credentials still work across segments. Deploying a VPN (B) adds encryption but relies on the underlying authentication method, so if credentials are shared, the VPN shares those risks too. Regularly changing Wi-Fi passwords (C) is ineffective against credential sharing because once a password is shared, rotating it disrupts legitimate users without preventing unauthorized access by those who already possess the old or new password.Community Comment Notes
The community consensus strongly supports option D, with users noting that 802.1X is the standard for secure wireless access control. One commenter referenced ChatGPT's explanation of IEEE standards, highlighting that 802.1X uses EAP to exchange messages securely during authentication. Another user simply noted it was 'the only one that makes sense,' reflecting the general understanding that other options do not address individual accountability.Exam Strategy
When asked about securing wireless networks against credential sharing or unauthorized device access, always look for 802.1X or RADIUS-based solutions as they provide the strongest individual authentication layer.
Frequently Asked Questions
Why doesn't network segmentation stop credential sharing?
Segmentation isolates traffic but doesn't verify who is using the credentials; if a student shares their login, anyone can connect from any segmented area.
Is 802.1X better than just changing Wi-Fi passwords?
Yes, because 802.1X authenticates each user individually via a central server, whereas changing passwords only affects the shared secret used by all users.