CCST - Cisco Certified Support Technician Wireless Security Protocols (WPA) Questions and Answers

Question 1

A company wants to implement the highest level of security for its corporate wireless network, which is used by hundreds of employees with individual company-issued laptops.
Which wireless security protocol and mode should be implemented to ensure each user authenticates with unique credentials?

Accepted Answer

WPA2-Enterprise

Answer

WPA2-Personal

Answer

WPA3-Personal

Answer

WPA with TKIP

Question 2

A support technician is configuring a new SOHO (Small Office/Home Office) wireless router. The goal is to use the most current and secure protocol that protects against offline dictionary attacks, even if the password is simple. Which WPA protocol should be chosen?

Accepted Answer

WPA3 with SAE

Answer

WPA with AES

Answer

WPA2 with TKIP

Answer

WPA2 with AES-CCMP

Question 3

Which of the following encryption protocols is considered a deprecated, older standard associated with the original WPA, while its successor, CCMP, is the mandatory standard for WPA2?

Accepted Answer

TKIP

Answer

AES

Answer

SAE

Answer

EAP

Question 4

A user is setting up a guest network at a small coffee shop. To support older devices, the technician enables a 'transition mode' on the new WPA3-capable router. What is the primary function of WPA3 Transition Mode?

Accepted Answer

It allows both WPA3-capable and WPA2-capable devices to connect to the same SSID.

Answer

It forces all devices to use the highest 192-bit encryption.

Answer

It blocks any device that does not support Protected Management Frames (PMF).

Answer

It completely disables WPA2-Personal (PSK) in favor of WPA3-Personal (SAE).

Question 5

A technician is auditing the security of a wireless network and discovers that Wi-Fi Protected Setup (WPS) is enabled. Why is this feature generally considered a significant security risk on WPA/WPA2 networks?

Accepted Answer

The WPS PIN is susceptible to brute-force attacks, which can reveal the WPA2 pre-shared key.

Answer

It limits the password length to 8 characters.

Answer

It disables AES encryption and forces the use of the weaker TKIP protocol.

Answer

It requires the SSID to be broadcast, preventing the use of a hidden network.

Question 6

When comparing WPA2-Personal and WPA3-Personal, what is the fundamental change in the authentication method that enhances security?

Accepted Answer

WPA3 replaces the Pre-Shared Key (PSK) four-way handshake with Simultaneous Authentication of Equals (SAE).

Answer

WPA3 requires the use of a RADIUS server for all personal networks.

Answer

WPA3 mandates 192-bit encryption, whereas WPA2 only supports 128-bit.

Answer

WPA3 introduces TKIP for stronger message integrity over PSK.

A company wants to implement the highest level of security for its corporate wireless network, which is used by hundreds of employees with individual company-issued laptops.Which wireless security protocol and mode should be implemented to ensure each user authenticates with unique credentials?

A company wants to implement the highest level of security for its corporate wireless network, which is used by hundreds of employees with individual company-issued laptops.
Which wireless security protocol and mode should be implemented to ensure each user authenticates with unique credentials?