A company wants to deploy a wireless network for employees using WPA2-Enterprise. The IT team has set up a RADIUS server and configured the access points to use it. However, when a user attempts to connect, the authentication fails. The RADIUS server logs show that the access point is sending requests, but the server is rejecting them. Which step should the IT team take first to troubleshoot this issue?

Verify that the access point is using the correct SSID and encryption protocol.

Ensure that the user's device supports the EAP method configured on the RADIUS server.

Verify that the RADIUS shared secret configured on the access point matches the one configured on the RADIUS server.

Check that the user's password is correct by testing with a known-good account.

A company is deploying a new wireless network for a remote branch office. The branch has no local servers and connects back to headquarters via a site-to-site VPN. The security team wants to use WPA3-Enterprise, but the existing RADIUS server at headquarters is only reachable over the VPN tunnel. Which consideration is most important for the deployment?

The access points must support WPA3-Enterprise in addition to WPA3-SAE.

The RADIUS server must be reachable from the branch access points, which requires the VPN tunnel to be up before wireless authentication can succeed.

The branch office must deploy a local RADIUS server to avoid authentication delays.

The VPN tunnel must be configured to carry RADIUS traffic over UDP port 1812.

A hotel offers a guest Wi-Fi network. The hotel's management wants to prevent guests from accessing the hotel's internal management network, which includes the property management system (PMS) and security cameras. The hotel has a single internet connection and a managed switch. Which configuration should be implemented?

Enable WPA3-SAE on the guest network to encrypt all guest traffic.

Disable the guest SSID and provide a wired connection for guests.

Create a guest VLAN for the Wi-Fi network and configure the switch to block traffic from the guest VLAN to the management VLAN.

Use MAC address filtering to allow only registered guests.

CompTIACloudNetX

Domain 2Objective 6

Wireless Security CNX-001 Practice Questions (Page 5)

Part of the Network security domain, which accounts for 28% of the CNX-001 exam. CompTIA does not publish an official question count, but from its 165-minute exam (~65–110 total, ~18–31 in this domain), expect 3–5 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

28%of the exam

Questions 21–24

21application · medium
A company wants to deploy a wireless network for employees using WPA2-Enterprise. The IT team has set up a RADIUS server and configured the access points to use it. However, when a user attempts to connect, the authentication fails. The RADIUS server logs show that the access point is sending requests, but the server is rejecting them. Which step should the IT team take first to troubleshoot this issue?
Select an answer first
22application · medium
A company is deploying a new wireless network for a remote branch office. The branch has no local servers and connects back to headquarters via a site-to-site VPN. The security team wants to use WPA3-Enterprise, but the existing RADIUS server at headquarters is only reachable over the VPN tunnel. Which consideration is most important for the deployment?
Select an answer first
23application · medium
A hotel offers a guest Wi-Fi network. The hotel's management wants to prevent guests from accessing the hotel's internal management network, which includes the property management system (PMS) and security cameras. The hotel has a single internet connection and a managed switch. Which configuration should be implemented?
Select an answer first
24foundation · easy
Which wireless authentication method uses a pre-shared key that is manually entered on each client device?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CNX-001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “CNX-001” is a trademark of its owner, used for identification only.

Wireless Security CNX-001 Practice Questions (Page 5)

Questions 21–24

Which wireless authentication method uses a pre-shared key that is manually entered on each client device?

Keep studying — Network security