Which of the following descriptions about PMK fast roaming are correct? (Multiple choice)

Question

Options

• APMK fast roaming supports WPA3-802.1X or WPA2-802.1X authentication methods
• BPMK fast roaming does not require re-authentication and key negotiation, thus reducing roaming
• CPMK fast roaming requires the client to support fast roaming technology
• DPMK fast roaming is achieved through pairwise master key PMK caching technology

• A
  81% (22)
• B
  19% (5)

Explanation

PMK fast roaming works by caching the Pairwise Master Key (PMK) from a previous successful authentication session, allowing a client to skip the full 802.1X/EAP exchange when roaming back to a known AP - this is exactly what D describes. Since PMK caching is an enterprise-grade feature, it naturally applies to enterprise authentication modes, making A correct (WPA2-Enterprise and WPA3-Enterprise both use 802.1X). C is correct because PMK caching requires mutual support - if the client doesn't implement the caching mechanism, the AP cannot use it unilaterally.

B is the distractor: PMK fast roaming skips re-authentication (the EAP/802.1X exchange), but it still requires key negotiation (the 4-way handshake) to derive fresh session keys. The statement incorrectly claims both steps are eliminated, when only the authentication phase is skipped.

Memory tip: Think of PMK caching like a "VIP pass" - the client already proved identity (authentication skipped), but security still checks your bag at the door (key negotiation still happens). The VIP pass only works if both the bouncer (AP) and the guest (client) recognize the system.

No community discussion yet for this question.