350-401 Question #228: Real Exam Question with Answer & Explanation

The correct answer is A: mandatory. On a Cisco IOS XE controller, 802.11w Protected Management Frames (PMF) are configured using options such as 'mandatory' for the PMF mode, 'association-comeback' for reconnection handling, and 'saquery-retry-time' for SA query intervals.

Submitted by dimitri_ru· Mar 6, 2026Security

Question

You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)

Options

Amandatory
Bassociation-comeback
CSA teardown protection
Dsaquery-retry-time
Eenable
Fcomeback-time

Explanation

On a Cisco IOS XE controller, 802.11w Protected Management Frames (PMF) are configured using options such as 'mandatory' for the PMF mode, 'association-comeback' for reconnection handling, and 'saquery-retry-time' for SA query intervals.

Common mistakes.

C. SA teardown protection describes a benefit or feature of 802.11w, not a specific CLI configuration option keyword itself.
E. enable is a general command used to activate features, but it is not a specific configuration option keyword within the detailed PMF settings, which typically involve mode (e.g., mandatory, optional) or timer settings.
F. comeback-time is a component or value within the broader association-comeback-time feature, but association-comeback itself is the more direct and encompassing configuration option keyword.

Concept tested. 802.11w (PMF) configuration

Reference. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/protected_management_frames.html

Topics

#802.11w PMF#WLAN security#Cisco IOS XE CLI

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice Browse All 350-401 Questions