200-301 Question #1569: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. An engineer is using the Cisco WLC GUI to configure a WLAN for WPA2 encryption with AES and preshared key Cisc0123456. After the engineer selects the WPA + WPA2 option from the Layer 2 Security drop-down list, which two tasks must they perform to complete the process? (Choose two.)

Options

• ASelect the WPA2 Policy, AES, and TKIP check boxes.
• BSelect ASCII from the PSK Format drop-down list, enter the key, and leave the Auth Key Mgmt
• CSelect PSK from the Auth Key Mgmt drop-down list, set the PSK Format to ASCII, and enter the
• DSelect the WPA2 Policy and AES check boxes.
• ESelect CCKM from the Auth Key Mgmt drop-down list, set the PSK Format to Hex, and enter the

Explanation

To configure WPA2 encryption with AES and a preshared key, the engineer must select the WPA2 Policy and AES checkboxes, and configure PSK from the Auth Key Mgmt dropdown with the correct format and key.

Common mistakes.

• A. Selecting TKIP is incorrect because the requirement explicitly specifies AES encryption, and TKIP is an older, less secure encryption method not recommended for WPA2.
• B. This option is incomplete; it correctly mentions setting the PSK format and entering the key but omits the critical step of explicitly selecting 'PSK' for Auth Key Management.
• E. CCKM (Cisco Centralized Key Management) is a fast roaming mechanism, not an Auth Key Management method for PSK, and the PSK format for 'Cisc0123456' should be ASCII, not Hex.

Concept tested. Cisco WLC WPA2-PSK with AES configuration

Reference. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/wlan_security_wpa_wpa2.html

No community discussion yet for this question.