A legacy system in a manufacturing plant uses WPA with TKIP and a pre-shared key. The plant manager wants to improve security without changing the hardware. Which action is most appropriate?

Change the pre-shared key to a longer, more complex passphrase

Upgrade the firmware to support WPA2 with AES-CCMP

Disable encryption and rely on MAC filtering

Keep the current configuration because TKIP is secure enough

A company is migrating from WPA to WPA2. The IT director asks what the main security improvement is. Which response is correct?

WPA2 mandates the use of AES-CCMP, providing stronger encryption and integrity

WPA2 uses TKIP for encryption, which is stronger than AES

WPA2 is backward-compatible with WEP

WPA2 eliminates the need for authentication

A security consultant is reviewing a client's wireless network, which uses WPA with TKIP. The client asks why WPA was created and what its main purpose was. Which explanation is accurate?

WPA was created to provide faster wireless speeds

WPA was created to replace WPA2

WPA was created to support more users on a single access point

WPA was created to replace WEP and address its security flaws, using TKIP as a transitional protocol

A network admin is configuring a wireless network and must choose between TKIP and AES-CCMP. The admin wants to ensure the highest level of security. Which choice is correct and why?

Use AES-CCMP only if the network uses WPA3

Use AES-CCMP because it provides stronger encryption and integrity

Use TKIP because it supports more devices

CCIE Security

Domain 3Objective 5

3.5 Wireless Security Technologies CCIE-SECURITY Practice Questions (Page 8)

Part of the 3.0 Security Infrastructure domain, which accounts for 15% of the CCIE-SECURITY exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

10concepts

15%of the exam

Questions 36–39

36application · medium
A legacy system in a manufacturing plant uses WPA with TKIP and a pre-shared key. The plant manager wants to improve security without changing the hardware. Which action is most appropriate?
Select an answer first
37application · medium
A company is migrating from WPA to WPA2. The IT director asks what the main security improvement is. Which response is correct?
Select an answer first
38application · medium
A security consultant is reviewing a client's wireless network, which uses WPA with TKIP. The client asks why WPA was created and what its main purpose was. Which explanation is accurate?
Select an answer first
39application · easy
A network admin is configuring a wireless network and must choose between TKIP and AES-CCMP. The admin wants to ensure the highest level of security. Which choice is correct and why?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CCIE-SECURITY

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-SECURITY” is a trademark of its owner, used for identification only.