Which Layer 2 security mode must be configured with Cisco ISE to allow a single SSID to authenticate IoT devices using distinct passwords?

Identity PSK (iPSK) is the correct answer because it allows multiple devices to connect to the same SSID using unique pre-shared keys (passwords), which are dynamically assigned and managed by Cisco ISE. This is ideal for IoT devices where each device might have a distinct credential but shares a common network access point. Central Web Authentication (CWA) is incorrect because it redirects users to a web portal for authentication, which is not suitable for most IoT devices that lack web browsers. Cisco Centralized Key Management (CCKM) is incorrect as it's a proprietary Cisco fast roaming solution, not an authentication method for distinct passwords. Fast Transition (802.11r) is also a fast roaming standard and does not address the requirement for distinct passwords per device on a single SSID.