Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Cisco Certified Network Associate (CCNA) · Cisco
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D. Select WPA2 Policy Disable PMF Enable PSK Here's why: Selecting the WPA2 Policy ensures that the WLAN uses WPA2 for secure authentication. Disabling PMF (Protected Management Frames) is necessary if you're not using RADIUS or other advanced security mechanisms. Enabling PSK (Pre-Shared Key) allows the use of a setup password for authentication instead of RADIUS servers.
Better option would be - Enable WPA2 - Enable Pre-Shared Key - Enable FT PSK But as it's not an option, then we are choosing between the closest options B and D. Enable Cisco Centralized Key Management or Disable PMF? CCKM, Cisco Centralized Key Management - is another alternative to PSK, and there is nothing about PSK - https://community.cisco.com/t5/wireless-mobility-knowledge-base/what-is-cckm-and-how-does-it-affect-fast-and-secure-roaming/ta-p/3130421 So it means we disable PMF.
Well, in Packet Tracer, CCKM is greyed out in both WPA Policy and WPA2 Policy option under WPA+WPA2 Parameter selection. All the other Layer 2 Security options says "This feature is not supported in Packet Tracer". Soooo... Also, in WPA2 Policy, PMF is greyed out as well and the setting is fixed at Disabled. I'm picking D since WPA2 is newer than WPA.