350-401 Question #29: Real Exam Question with Answer & Explanation

Question

When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

Options

• ANTP server
• BPKI server
• CREDIUS server
• DTACACS server

Explanation

RADIUS Server (Option C) is required when configuring WPA2 Enterprise because it acts as the Authentication, Authorization, and Accounting (AAA) server that validates user credentials against a centralized database, enabling individual user-based authentication rather than a single shared password used in WPA2 Personal.

Why the distractors are wrong:

• A (NTP Server): NTP provides time synchronization across network devices and is not a security authentication component required for WPA2 Enterprise.
• B (PKI Server): While PKI (Public Key Infrastructure) can be used in enterprise environments for certificate-based authentication (EAP-TLS), it is not the fundamental required component - RADIUS is the core authentication server that WPA2 Enterprise cannot function without.
• D (TACACS+ Server): TACACS+ is a Cisco-proprietary AAA protocol primarily used for device administration (managing routers/switches), not wireless user authentication.

🧠 Memory Tip: Think of WPA2 Enterprise as the "corporate VIP club" - every user needs a personal ID checked at the door. The bouncer checking those IDs is the RADIUS server. No RADIUS = no WPA2 Enterprise. Remember: "Enterprise = RADIUS" (both have multiple syllables and both mean "serious business!").

No community discussion yet for this question.