A network administrator is configuring a new AP. The AP will broadcast two SSIDs: "Corp" and "Guest". The "Corp" SSID uses WPA2-Enterprise, and the "Guest" SSID uses open authentication with a captive portal. What is a potential security risk of this configuration?

The guest network can be used to access the corporate network if no isolation is configured.

WPA2-Enterprise is less secure than WPA2-PSK.

The corporate SSID is hidden, so it is not secure.

The guest network uses open authentication, which is always insecure.

A company wants to provide guest Wi-Fi access in its lobby. The guest network must be easily identifiable and isolated from the corporate network. The administrator configures a new SSID named 'GuestWiFi' and enables WPA2-PSK. What additional configuration is required to ensure guest clients can connect and are isolated?

Assign a static IP address to each guest

Enable client isolation on the guest SSID

A company is migrating from WPA2-PSK to WPA3-Personal. The administrator wants to ensure that all existing client devices can still connect. Some older devices do not support WPA3. What is the best migration strategy?

Keep WPA2-PSK and do not migrate

Use WPA3 with a separate SSID for WPA2 devices

A company is upgrading its wireless network to support the latest security standards. The new access points support WPA3, but some older laptops only support WPA2. The administrator wants to maintain strong security while ensuring all devices can connect. What should the administrator configure?

Enable WPA3 with transition mode

A company is deploying a wireless network for a temporary event. The event will last one week, and the company wants to provide internet access to attendees. The company has a limited budget and wants to minimize setup time. Which security configuration is the most appropriate for this temporary network?

Use an open network with a captive portal

Use WPA2-PSK with a shared password

CiscoCertified Network Associate (CCNA)

Domain 1Objective 11

1.11 Describe Wireless Principles 200-301 Practice Questions (Page 1)

Part of the Network Fundamentals domain, which accounts for 20% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

4concepts

20%of the exam

Questions 1–5

1expert · hard
A network administrator is configuring a new AP. The AP will broadcast two SSIDs: "Corp" and "Guest". The "Corp" SSID uses WPA2-Enterprise, and the "Guest" SSID uses open authentication with a captive portal. What is a potential security risk of this configuration?
Select an answer first
2application · medium
A company wants to provide guest Wi-Fi access in its lobby. The guest network must be easily identifiable and isolated from the corporate network. The administrator configures a new SSID named 'GuestWiFi' and enables WPA2-PSK. What additional configuration is required to ensure guest clients can connect and are isolated?
Select an answer first
3expert · hard
A company is migrating from WPA2-PSK to WPA3-Personal. The administrator wants to ensure that all existing client devices can still connect. Some older devices do not support WPA3. What is the best migration strategy?
Select an answer first
4application · medium
A company is upgrading its wireless network to support the latest security standards. The new access points support WPA3, but some older laptops only support WPA2. The administrator wants to maintain strong security while ensuring all devices can connect. What should the administrator configure?
Select an answer first
5expert · hard
A company is deploying a wireless network for a temporary event. The event will last one week, and the company wants to provide internet access to attendees. The company has a limited budget and wants to minimize setup time. Which security configuration is the most appropriate for this temporary network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

1.11 Describe Wireless Principles 200-301 Practice Questions (Page 1)

Questions 1–5

A network administrator is configuring a new AP. The AP will broadcast two SSIDs: "Corp" and "Guest". The "Corp" SSID uses WPA2-Enterprise, and the "Guest" SSID uses open authentication with a captive portal. What is a potential security risk of this configuration?

A company is migrating from WPA2-PSK to WPA3-Personal. The administrator wants to ensure that all existing client devices can still connect. Some older devices do not support WPA3. What is the best migration strategy?

A company is upgrading its wireless network to support the latest security standards. The new access points support WPA3, but some older laptops only support WPA2. The administrator wants to maintain strong security while ensuring all devices can connect. What should the administrator configure?

Keep studying — Network Fundamentals