A coffee shop offers free Wi-Fi to customers. The owner wants customers to be able to access the internet, but not to communicate with each other or with the shop's point-of-sale (POS) system, which is connected to the same LAN. The shop has a single wireless access point and a single wired switch. Which configuration should you implement on the access point?

Configure MAC address filtering to allow only customer devices that have registered at the counter.

Disable SSID broadcast and require customers to manually enter the network name.

Set the customer SSID to use WPA2-PSK with a strong passphrase.

Enable client isolation (AP isolation) on the customer SSID.

A manufacturing company wants to deploy a wireless network for IoT sensors on the factory floor. The sensors only support WPA2-PSK and cannot be updated to support WPA3. The security team is concerned about the risk of the shared passphrase being extracted from a captured handshake. Which additional control best mitigates this risk while keeping the sensors functional?

Disable the SSID broadcast and use a hidden network name.

Use a very long, random passphrase and rotate it regularly.

Enable MAC address filtering to allow only the sensors.

Deploy a rogue AP detection system to monitor for unauthorized access points.

What is the primary purpose of wireless client isolation?

To prevent wireless clients from communicating directly with each other

To improve roaming between access points

To increase wireless signal strength

To allow multiple SSIDs on the same access point

CompTIACloudNetX

Domain 2Objective 6

Wireless Security CNX-001 Practice Questions (Page 3)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

28%of the exam

Questions 11–15

11application · medium
A coffee shop offers free Wi-Fi to customers. The owner wants customers to be able to access the internet, but not to communicate with each other or with the shop's point-of-sale (POS) system, which is connected to the same LAN. The shop has a single wireless access point and a single wired switch. Which configuration should you implement on the access point?
Select an answer first
12application · medium
A manufacturing company wants to deploy a wireless network for IoT sensors on the factory floor. The sensors only support WPA2-PSK and cannot be updated to support WPA3. The security team is concerned about the risk of the shared passphrase being extracted from a captured handshake. Which additional control best mitigates this risk while keeping the sensors functional?
Select an answer first
13foundation · easy
What is the primary purpose of wireless client isolation?
Select an answer first
14foundation · easy
Which wireless encryption protocol uses a 128-bit key and is considered the most secure among the options listed?
Select an answer first
15foundation · easy
Which feature, when enabled on an access point, prevents wireless clients from communicating directly with each other while still allowing them to access the internet?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.

Wireless Security CNX-001 Practice Questions (Page 3)

Questions 11–15

What is the primary purpose of wireless client isolation?

Which wireless encryption protocol uses a 128-bit key and is considered the most secure among the options listed?

Which feature, when enabled on an access point, prevents wireless clients from communicating directly with each other while still allowing them to access the internet?

Keep studying — Network security