nerdexam
Cisco

300-370 · Question #56

A network engineer has identified clients who are experiencing delays white roaming. The network is configured with WPA2-Enterpnse. AES encryption, 802 1X authentication, and Cisco Centralized Key…

The correct answer is A. Utilize a supplicant that supports Cisco Centralized Key Management.". Roaming delays in a WPA2-Enterprise network using Cisco Centralized Key Management (CCKM) are resolved by ensuring client supplicants support CCKM for fast re-authentication.

Troubleshooting Client Connectivity Issues

Question

A network engineer has identified clients who are experiencing delays white roaming. The network is configured with WPA2-Enterpnse. AES encryption, 802 1X authentication, and Cisco Centralized Key Management. Which change resolves the roaming delays?

Options

  • AUtilize a supplicant that supports Cisco Centralized Key Management."
  • BEnable AES and TKIP encryption
  • CDisable client session timeout
  • DInstall wireless device drivers from Cisco

How the community answered

(18 responses)
  • A
    72% (13)
  • B
    17% (3)
  • C
    6% (1)
  • D
    6% (1)

Why each option

Roaming delays in a WPA2-Enterprise network using Cisco Centralized Key Management (CCKM) are resolved by ensuring client supplicants support CCKM for fast re-authentication.

AUtilize a supplicant that supports Cisco Centralized Key Management."Correct

Cisco Centralized Key Management (CCKM) is a Cisco proprietary fast roaming technology designed to reduce roaming delays by allowing clients to quickly re-authenticate with new access points without a full 802.1X exchange, provided the client supplicant supports this feature.

BEnable AES and TKIP encryption

Enabling both AES and TKIP encryption (mixed mode) is generally discouraged due to security vulnerabilities and performance issues with TKIP, and it does not directly address roaming delays caused by re-authentication.

CDisable client session timeout

Disabling client session timeout is not a security best practice and does not resolve roaming delays caused by the re-authentication process itself, only extending the period of association.

DInstall wireless device drivers from Cisco

While up-to-date wireless device drivers are important for general client performance, installing Cisco-specific drivers does not directly address roaming delays caused by 802.1X re-authentication when CCKM is already configured on the infrastructure side.

Concept tested: Cisco Centralized Key Management (CCKM) for fast roaming

Source: https://www.cisco.com/c/en/us/td/docs/wireless/wcs/3-2/configuration/guide/c32roam.html

Topics

#Roaming#Fast roaming#CCKM#802.1X

Community Discussion

No community discussion yet for this question.

Full 300-370 Practice