nerdexam
Cisco

350-401 · Question #1109

Refer to the exhibit. Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?

The correct answer is A. Enable Fast Transition and FT + PSK.. To configure a WLAN for WPA2-AES with PSK and restrict connections to only 802.11r-capable clients, both Fast Transition and FT + PSK must be enabled.

Submitted by katya_ua· Mar 6, 2026

Question

Refer to the exhibit. Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?

Exhibits

350-401 question #1109 exhibit 1
350-401 question #1109 exhibit 2

Options

  • AEnable Fast Transition and FT + PSK.
  • BEnable Fast Transition and PSK.
  • CChange Fast Transition to Adaptive Enabled and enable FT + PSK.
  • DEnable PSK and FT + PSK

How the community answered

(36 responses)
  • A
    75% (27)
  • B
    3% (1)
  • C
    8% (3)
  • D
    14% (5)

Why each option

To configure a WLAN for WPA2-AES with PSK and restrict connections to only 802.11r-capable clients, both Fast Transition and FT + PSK must be enabled.

AEnable Fast Transition and FT + PSK.Correct

Enabling Fast Transition (802.11r) and specifically selecting 'FT + PSK' as the authentication method ensures that only clients supporting 802.11r with pre-shared keys can associate. This configuration strictly enforces 802.11r for client connections while using WPA2-AES with PSK.

BEnable Fast Transition and PSK.

Enabling 'Fast Transition' and 'PSK' separately might still allow non-802.11r clients to connect via standard PSK, failing to enforce 802.11r exclusively.

CChange Fast Transition to Adaptive Enabled and enable FT + PSK.

'Adaptive Enabled' for Fast Transition allows both 802.11r-capable and non-802.11r clients to connect, which violates the requirement to allow *only* 802.11r-capable clients.

DEnable PSK and FT + PSK

Simply enabling 'PSK' and 'FT + PSK' might not explicitly enable the Fast Transition feature itself, or might allow for fallback to standard PSK, thus not guaranteeing 802.11r-only client access.

Concept tested: WLAN WPA2-AES PSK with 802.11r Fast Transition enforcement

Source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/802-11r_fast_transition.html

Topics

#WLAN security#WPA2-AES PSK#802.11r Fast Transition#Wireless LAN configuration

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice