A user notices that their home Wi-Fi uses an old security setting that shows 'WPA/WPA2 (TKIP/AES)' in the router's wireless settings. They want to improve security. The router also supports WPA2-AES and WPA3. All their devices support WPA2 or WPA3. What should they do?

Disable all wireless security to avoid compatibility issues

Change the security mode to WPA2-AES only

Keep the current mixed TKIP/AES mode

A user is configuring a home router and wants to ensure that only their personal devices can connect. They have already set a strong WPA2 passphrase. What additional setting should they consider to further restrict access?

Change the router's default admin password

Reduce the wireless transmit power

A company has a mix of devices: some support WPA3, some only support WPA2, and a few legacy devices only support WPA (TKIP). The company wants to maximize security while ensuring all devices can connect. They also want to avoid the cost of replacing legacy devices. What is the best approach?

Use WPA2-Personal with TKIP enabled for legacy devices

Use a separate SSID for legacy devices with WPA-TKIP and a separate SSID for modern devices with WPA3

Use WPA2-Personal with AES and disable TKIP

Use WPA3-Personal with transition mode and disable TKIP

A user is comparing WPA2 and WPA3 for their home network. They have a new router that supports both. Their devices are all WPA3-capable. What is the main security advantage of choosing WPA3-Personal over WPA2-Personal?

WPA3 does not require a passphrase

WPA3 uses a stronger encryption algorithm (AES-256) and provides forward secrecy

WPA3 is compatible with all older devices

A small business owner wants to set up a secure Wi-Fi for customers. They want to avoid giving out a long passphrase. What is the best practice?

Use WPA2-Personal with a strong passphrase and display it on a sign

Disable encryption and use a captive portal

Use a short, easy-to-remember passphrase

Use WPA3-Enterprise with a RADIUS server

CiscoCertified Support Technician (CCST) Networking

Domain 6Objective 3

6.3. Configure Basic Wireless Security on a Home Router (WPAx). 100-150 Practice Questions (Page 6)

Part of the Security domain, which makes up ~13% of our current practice bank. Cisco does not publish an official question count, but from its 50-minute exam (~20–35 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

3concepts

Questions 26–30

26application · medium
A user notices that their home Wi-Fi uses an old security setting that shows 'WPA/WPA2 (TKIP/AES)' in the router's wireless settings. They want to improve security. The router also supports WPA2-AES and WPA3. All their devices support WPA2 or WPA3. What should they do?
Select an answer first
27application · medium
A user is configuring a home router and wants to ensure that only their personal devices can connect. They have already set a strong WPA2 passphrase. What additional setting should they consider to further restrict access?
Select an answer first
28expert · hard
A company has a mix of devices: some support WPA3, some only support WPA2, and a few legacy devices only support WPA (TKIP). The company wants to maximize security while ensuring all devices can connect. They also want to avoid the cost of replacing legacy devices. What is the best approach?
Select an answer first
29application · medium
A user is comparing WPA2 and WPA3 for their home network. They have a new router that supports both. Their devices are all WPA3-capable. What is the main security advantage of choosing WPA3-Personal over WPA2-Personal?
Select an answer first
30application · medium
A small business owner wants to set up a secure Wi-Fi for customers. They want to avoid giving out a long passphrase. What is the best practice?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 100-150

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “100-150” is a trademark of its owner, used for identification only.