350-401 · Question #1109
Refer to the exhibit. Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?
The correct answer is A. Enable Fast Transition and FT + PSK.. To configure a WLAN for WPA2-AES with PSK and restrict connections to only 802.11r-capable clients, both Fast Transition and FT + PSK must be enabled.
Question
Refer to the exhibit. Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?
Exhibits
Options
- AEnable Fast Transition and FT + PSK.
- BEnable Fast Transition and PSK.
- CChange Fast Transition to Adaptive Enabled and enable FT + PSK.
- DEnable PSK and FT + PSK
How the community answered
(36 responses)- A75% (27)
- B3% (1)
- C8% (3)
- D14% (5)
Why each option
To configure a WLAN for WPA2-AES with PSK and restrict connections to only 802.11r-capable clients, both Fast Transition and FT + PSK must be enabled.
Enabling Fast Transition (802.11r) and specifically selecting 'FT + PSK' as the authentication method ensures that only clients supporting 802.11r with pre-shared keys can associate. This configuration strictly enforces 802.11r for client connections while using WPA2-AES with PSK.
Enabling 'Fast Transition' and 'PSK' separately might still allow non-802.11r clients to connect via standard PSK, failing to enforce 802.11r exclusively.
'Adaptive Enabled' for Fast Transition allows both 802.11r-capable and non-802.11r clients to connect, which violates the requirement to allow *only* 802.11r-capable clients.
Simply enabling 'PSK' and 'FT + PSK' might not explicitly enable the Fast Transition feature itself, or might allow for fallback to standard PSK, thus not guaranteeing 802.11r-only client access.
Concept tested: WLAN WPA2-AES PSK with 802.11r Fast Transition enforcement
Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/802-11r_fast_transition.html
Topics
Community Discussion
No community discussion yet for this question.

