ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

IEEE 802.1X provides port-based network access control by keeping a switch port in an unauthorized state until a supplicant successfully completes an Extensible Authentication Protocol (EAP) exchange with a RADIUS server. The switch (the authenticator) can then apply dynamic VLAN assignment or downloadable ACLs, allowing compliant devices onto the production network or moving non-compliant hosts to a quarantine or remediation VLAN. Sticky MAC addressing, DHCP snooping, and LLDP offer useful security or discovery functions but cannot continuously authenticate endpoints and change VLAN membership based on posture assessment, so they do not satisfy the stated requirement.