H12-323_V2.0 · Question #26
Roaming switching time is a core indicator that affects the service experience of wireless users during roaming. PMK fast roaming can shorten the roaming delay of 802.1x users and improve the user's…
The correct answer is B. Omitting the 802.1X authentication process. PMK (Pairwise Master Key) caching works by storing the PMK derived from an initial 802.1X/EAP authentication session. When a user roams to a new AP that already holds the cached PMK, the full EAP exchange with the RADIUS server is bypassed - this is precisely what "omitting the…
Question
Roaming switching time is a core indicator that affects the service experience of wireless users during roaming. PMK fast roaming can shorten the roaming delay of 802.1x users and improve the user's Internet experience. So PMK roaming reduces the user's roaming delay in which of the following ways?
Options
- AOmitting the key negotiation process
- BOmitting the 802.1X authentication process
- CThe user re-association process is omitted
- DOmitted the 802.1X authentication process and key negotiation process
How the community answered
(26 responses)- A15% (4)
- B73% (19)
- C8% (2)
- D4% (1)
Explanation
PMK (Pairwise Master Key) caching works by storing the PMK derived from an initial 802.1X/EAP authentication session. When a user roams to a new AP that already holds the cached PMK, the full EAP exchange with the RADIUS server is bypassed - this is precisely what "omitting the 802.1X authentication process" means, making B correct.
Why the distractors are wrong:
- A is wrong because the 4-way handshake (key negotiation/PTK derivation) is not skipped - it still occurs after presenting the cached PMKID to negotiate session keys.
- C is wrong because the re-association exchange between the client and the new AP still takes place; PMK caching has no effect on that step.
- D is wrong because it incorrectly bundles key negotiation with the authentication skip - only the EAP/RADIUS round-trip is eliminated, not both phases.
Memory tip: Think of PMK as a "pre-cleared passport." You already proved your identity (802.1X), so border control (the new AP) just stamps it and hands you a fresh key (4-way handshake) without calling immigration headquarters (RADIUS server) again.
Topics
Community Discussion
No community discussion yet for this question.