What does forward secrecy in WPA3 ensure?

That the same encryption key is used for all sessions

That captured data cannot be decrypted even if the long-term password is later compromised

That only authorized users can access the network

That the network is immune to all types of attacks

A company is deploying a new WPA3-Enterprise network. The security team wants to ensure that even if an attacker captures the 4-way handshake and later obtains the password, they cannot decrypt previously captured traffic. Which WPA3 feature provides this protection?

Simultaneous Authentication of Equals (SAE)

Protected Management Frames (PMF)

A company is deploying a WLAN for employees and guests. Employees must use their corporate credentials, and guests must use a shared password. The security team requires the strongest available security for each group. The access points support WPA2 and WPA3. Which configuration should the administrator implement?

WPA2-Enterprise for employees and WPA3-Personal for guests

WPA3-Enterprise for employees and WPA3-Personal for guests

WPA3-Enterprise for both employees and guests

WPA2-Personal for employees and WPA3-Personal for guests

A company is upgrading from WPA2-Personal to WPA3-Personal. The administrator notices that some older laptops fail to connect after the upgrade. The laptops support WPA2 but not WPA3. What should the administrator do to maintain security while allowing these laptops to connect?

Revert to WPA2-Personal with AES-CCMP

Disable WPA3 and use WPA2-Enterprise

CiscoCertified Network Associate (CCNA)

Domain 5Objective 9

5.9 Describe Wireless Security Protocols (WPA, WPA2, and WPA3) 200-301 Practice Questions (Page 1)

Part of the Security Fundamentals domain, which accounts for 15% of the 200-301 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

6concepts

15%of the exam

Questions 1–5

1foundation · easy
What does forward secrecy in WPA3 ensure?
Select an answer first
2application · medium
A company is deploying a new WPA3-Enterprise network. The security team wants to ensure that even if an attacker captures the 4-way handshake and later obtains the password, they cannot decrypt previously captured traffic. Which WPA3 feature provides this protection?
Select an answer first
3application · medium
A security team is evaluating WPA3-Personal for a new deployment. They want to confirm that it provides protection against offline dictionary attacks and forward secrecy. Which feature of WPA3-Personal provides these benefits?
Select an answer first
4expert · hard
A company is deploying a WLAN for employees and guests. Employees must use their corporate credentials, and guests must use a shared password. The security team requires the strongest available security for each group. The access points support WPA2 and WPA3. Which configuration should the administrator implement?
Select an answer first
5expert · hard
A company is upgrading from WPA2-Personal to WPA3-Personal. The administrator notices that some older laptops fail to connect after the upgrade. The laptops support WPA2 but not WPA3. What should the administrator do to maintain security while allowing these laptops to connect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 200-301

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-301” is a trademark of its owner, used for identification only.

5.9 Describe Wireless Security Protocols (WPA, WPA2, and WPA3) 200-301 Practice Questions (Page 1)

Questions 1–5

What does forward secrecy in WPA3 ensure?

A company is deploying a new WPA3-Enterprise network. The security team wants to ensure that even if an attacker captures the 4-way handshake and later obtains the password, they cannot decrypt previously captured traffic. Which WPA3 feature provides this protection?

A security team is evaluating WPA3-Personal for a new deployment. They want to confirm that it provides protection against offline dictionary attacks and forward secrecy. Which feature of WPA3-Personal provides these benefits?

A company is upgrading from WPA2-Personal to WPA3-Personal. The administrator notices that some older laptops fail to connect after the upgrade. The laptops support WPA2 but not WPA3. What should the administrator do to maintain security while allowing these laptops to connect?

Keep studying — Security Fundamentals