A company is considering upgrading from WPA2-Enterprise to WPA3-Enterprise. The security team is concerned about the effort required to implement the upgrade. Which factor is most likely to increase the effort?

WPA3-Enterprise requires the use of SAE for all clients

WPA3-Enterprise does not support 802.1X, so a new authentication method must be implemented

WPA3-Enterprise requires the use of AES-CCMP, which is not supported by older access points

WPA3-Enterprise may require upgrading RADIUS servers and client devices to support new EAP methods and cryptographic suites

A wireless network engineer is troubleshooting a performance issue on a WPA2 network. The engineer notices that the access point is configured to use TKIP instead of AES-CCMP. What is the most likely impact of this configuration?

The network is not compliant with modern security standards and is vulnerable to known attacks

Reduced throughput because TKIP has more overhead than AES-CCMP

Improved security due to TKIP's stronger encryption

Increased compatibility with older devices

A company is planning to deploy a wireless network for a temporary event. The event staff wants to use WPA because it is simpler to configure. The security team objects. Which argument should the security team use?

WPA does not support encryption

WPA is not supported by any modern devices

WPA uses TKIP, which is deprecated and has known vulnerabilities

A security architect is evaluating WPA3-Personal for a small office. The office manager is concerned about the risk of password cracking. Which WPA3 feature directly addresses this concern?

SAE (Simultaneous Authentication of Equals)

CCIE Security

Domain 3Objective 5

3.5 Wireless Security Technologies CCIE-SECURITY Practice Questions (Page 6)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

15%of the exam

Questions 26–30

26expert · medium
A network architect is designing a wireless network for a government agency that requires compliance with strict security standards. The agency mandates the use of AES-CCMP for all wireless traffic. Which protocol should the architect choose?
Select an answer first
27expert · hard
A company is considering upgrading from WPA2-Enterprise to WPA3-Enterprise. The security team is concerned about the effort required to implement the upgrade. Which factor is most likely to increase the effort?
Select an answer first
28expert · hard
A wireless network engineer is troubleshooting a performance issue on a WPA2 network. The engineer notices that the access point is configured to use TKIP instead of AES-CCMP. What is the most likely impact of this configuration?
Select an answer first
29expert · medium
A company is planning to deploy a wireless network for a temporary event. The event staff wants to use WPA because it is simpler to configure. The security team objects. Which argument should the security team use?
Select an answer first
30expert · medium
A security architect is evaluating WPA3-Personal for a small office. The office manager is concerned about the risk of password cracking. Which WPA3 feature directly addresses this concern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.