nerdexam
Cisco

300-425 · Question #43

An engineer must speed up the reauthentication delays that are being experienced on the wireless infrastructure by deploying a key-caching mechanism. Which mechanism must be configured?

The correct answer is B. FT. Fast Transition (FT), defined in IEEE 802.11r, is the key-caching mechanism that reduces reauthentication delays when wireless clients roam between APs.

Mobility

Question

An engineer must speed up the reauthentication delays that are being experienced on the wireless infrastructure by deploying a key-caching mechanism. Which mechanism must be configured?

Options

  • APEAP
  • BFT
  • CPMF
  • DGTK-randomization

How the community answered

(27 responses)
  • B
    89% (24)
  • C
    4% (1)
  • D
    7% (2)

Why each option

Fast Transition (FT), defined in IEEE 802.11r, is the key-caching mechanism that reduces reauthentication delays when wireless clients roam between APs.

APEAP

PEAP is an EAP authentication method that encapsulates inner authentication inside a TLS tunnel - it is an authentication protocol, not a key-caching or fast-roaming mechanism.

BFTCorrect

Fast Transition (802.11r) uses a Mobility Domain and pre-establishes keying material between the client and target AP before the roam occurs, eliminating the full 802.1X/EAP exchange on every transition. The client caches the Pairwise Master Key Security Association (PMKSA) derived during the initial authentication and uses it to derive new PTKs for subsequent APs within the mobility domain. This dramatically reduces reauthentication latency compared to a full EAP round-trip.

CPMF

PMF (Protected Management Frames, 802.11w) protects management frames such as deauthentication and disassociation from spoofing, and has no role in reducing reauthentication delays.

DGTK-randomization

GTK-randomization generates a new Group Temporal Key after each client disassociation to prevent key-reuse attacks, and does not address reauthentication speed or key caching.

Concept tested: 802.11r Fast Transition key-caching for roaming

Source: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/215935-configure-802-11r-fast-transition-on-cat.html

Topics

#Fast Transition#802.11r#key caching#reauthentication delay

Community Discussion

No community discussion yet for this question.

Full 300-425 Practice