Which feature on the Cisco Wireless LAN Controller when enabled restricts management access from specific networks?
Correct Answer: A
A CPU ACL on a Cisco Wireless LAN Controller restricts management-plane traffic destined to the controller itself. That is the feature used when management access must be limited to specific source networks. The CPU ACL is applied to traffic handled by the controller CPU, such as SSH, HTTPS, Telnet, SNMP, or other management access depending on platform support and configuration. TACACS+ and RADIUS are AAA services; they authenticate or authorize users but do not by themselves filter which source networks can reach the controller management plane. A Flex ACL applies to client data traffic in FlexConnect designs, not to controller management access. Cisco CCNA v1.1 Security Fundamentals expects the distinction between access control and authentication. If the requirement says restrict management access from specific networks, the security control must filter management-plane packets before login is even considered. On a WLC, that points to the CPU ACL.