
CCIE Security
Domain 3Objective 5
3.5 Wireless Security Technologies CCIE-SECURITY Practice Questions (Page 4)
Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)
39questions here
8free pages
10concepts
15%of the exam
Questions 16–20
- 16
Which standard is WPA2 based on?
Select an answer first - 17
In WPA2, which two modes are available for authentication?
Select an answer first - 18
What encryption and integrity algorithm is used by WPA2 for data protection?
Select an answer first - 19
What is the primary authentication method introduced in WPA3 to replace the Pre-Shared Key (PSK) method?
Select an answer first - 20
A regional bank is deploying a new guest Wi-Fi network in its branch lobbies. The security team requires that guest passwords cannot be guessed through offline dictionary attacks, and they want forward secrecy so that a compromised session key cannot decrypt past traffic. The access points support WPA2 and WPA3. Which configuration should the team implement?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.