Elections poll tablets must authenticate to the civic WLAN with 802.1X certificates. Where should the administrator deploy that device identity?
Select an answer to reveal the explanation.
Short Explanation
802.1X on a tablet is a nametag the radio presents at the Wi-Fi door. UEM drops the certificate on the device and a Wi-Fi profile tells the SSID to use it. Access SAML and Carbon Black permissions never enroll that cert into the WLAN supplicant.
Full Explanation
Elections poll tablets must authenticate to the civic WLAN with 802.1X certificates. Deploy a UEM certificate profile plus a Wi-Fi profile that uses that certificate for 802.1X—device identity is a nametag the radio presents at the Wi-Fi door. Granting a Carbon Black Cloud permission so the 802.1X supplicant can run as SYSTEM fails by concept because CBC permissions do not enroll device certificates into the WLAN supplicant. Creating a Workspace ONE Access network-range policy that presents a SAML assertion to the WLAN controller fails because Access SAML is for application SSO, not 802.1X EAP certificate presentation on Wi-Fi. Binding an NSX-T identity firewall group to poll-tablet MAC addresses and skipping device certificates fails because IDFW grouping is not a substitute for certificate-based 802.1X on the tablet. Exam caveat: WLAN 802.1X device identity is UEM certificate profile plus Wi-Fi profile—not CBC permissions, Access SAML, or NSX MAC groups alone. Operational check: deploy both profiles to a poll tablet, join the civic SSID with 802.1X, confirm certificate identity is used, and verify guest or PSK fallback is not the production path. Stage spare poll tablets with the same profiles before election day so last-minute units do not fall back to open or PSK networks.