Which of the following is a key feature of WPA that distinguished it from WEP?

Use of static encryption keys for all clients

Support for both pre-shared key and 802.1X authentication

Mandatory use of AES-CCMP encryption

How does AES-CCMP provide confidentiality in WPA2?

By using a simple XOR with a static key

By using AES in Counter mode to generate a keystream that is XORed with the plaintext

By using the CBC-MAC output as the ciphertext

By using RSA to encrypt the data

In WPA's Pre-Shared Key (PSK) mode, how is the initial key derived?

From a passphrase or a 256-bit key that is manually configured on both the AP and clients

From a certificate issued by a certificate authority

From a random number generated by the access point

What is the most significant security enhancement of WPA2 over WPA?

Mandatory use of AES-CCMP for encryption

Support for 802.1X authentication

Introduction of TKIP encryption

CCIE Security

Domain 3Objective 5

3.5 Wireless Security Technologies CCIE-SECURITY Practice Questions (Page 3)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

15%of the exam

Questions 11–15

11foundation · easy
Which of the following is a key feature of WPA that distinguished it from WEP?
Select an answer first
12foundation · easy
How does AES-CCMP provide confidentiality in WPA2?
Select an answer first
13foundation · easy
In WPA's Pre-Shared Key (PSK) mode, how is the initial key derived?
Select an answer first
14foundation · easy
What encryption protocol does WPA use to provide data confidentiality?
Select an answer first
15foundation · easy
What is the most significant security enhancement of WPA2 over WPA?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.