While configuring a new SSID to present a browser-based splash page for user authentication, which WLAN Layer 3 setting is required?

The correct answer is Web Policy. When configuring an SSID to use a browser-based splash page for user authentication (like a guest portal), you need to enable and configure a "Web Policy" under the WLAN's Layer 3 security settings. This policy dictates how the controller intercepts HTTP/HTTPS traffic and redirects users to the splash page for authentication before granting full network access. Local Policy is a general term for local authentication rules, not specific to splash pages. WPA2 Policy refers to the encryption and authentication method (e.g., PSK or 802.1X) for the wireless link itself, not the web-based authentication portal. CCKM (Cisco Centralized Key Management) is a fast roaming technique, unrelated to splash page authentication.