A security team wants to ensure that every device connecting to a wired switch port must present valid credentials before it is granted any network access. Devices that fail authentication should be denied or placed into a restricted VLAN. Which technology best meets this requirement?