nerdexam
Cisco

350-401 · Question #379

A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To configure the employee

The correct answer is A. 802.1X D. OPEN. Wi-Fi 6 Greenfield Security Policies Explanation For a Wi-Fi 6 greenfield deployment leveraging enhanced speeds (specifically OFDMA and BSS Coloring), the network must operate in HE (High Efficiency) mode, which requires specific Layer 2 security configurations. 802.1X (A) provid

Submitted by lars.no· Mar 6, 2026Security

Question

A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To configure the employee WLAN, which two Layer 2 security policies should be used? (Choose two.)

Options

  • A802.1X
  • BWPA (AES)
  • CWPA2 (AES) + WEP
  • DOPEN

How the community answered

(51 responses)
  • A
    84% (43)
  • B
    6% (3)
  • C
    10% (5)

Explanation

Wi-Fi 6 Greenfield Security Policies Explanation

For a Wi-Fi 6 greenfield deployment leveraging enhanced speeds (specifically OFDMA and BSS Coloring), the network must operate in HE (High Efficiency) mode, which requires specific Layer 2 security configurations. 802.1X (A) provides enterprise-grade authentication, and when combined with OPEN (D) security policy (using OWE - Opportunistic Wireless Encryption or as part of WPA3 configuration), it satisfies the requirements for Wi-Fi 6's greenfield mode while maintaining trusted employee access. The key concept is that Wi-Fi 6 greenfield mode restricts which security protocols are permitted to ensure backward compatibility doesn't degrade performance.

Why the distractors are wrong:

  • WPA (AES) (B) is a legacy WPA1-based protocol that would force the network into mixed/compatibility mode, breaking the greenfield deployment and limiting Wi-Fi 6 speeds
  • WPA2 (AES) + WEP (C) is incorrect because WEP is a deprecated, insecure protocol and combining it with WPA2 would also compromise the greenfield-only environment

Memory Tip: Think "Greenfield = Clean Field" - a greenfield Wi-Fi 6 deployment means no legacy protocols allowed. WEP and old WPA are "weeds" that contaminate your clean field. Only modern protocols (802.1X + OPEN/OWE) keep your Wi-Fi 6 garden pure!

Topics

#Wi-Fi 6#Wireless Security#802.1X#WLAN Configuration

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice