In an AOS-10 architecture using an AP. a gateway and traffic forwarding mode * mixed, what happens when a client connects to an open enhanced 5SID where their VLAN assignment will be bridged?

Question

Options

• AAuthenticated Diffie-Hellman is not utilized
• BRADIUS protocol is utilized.
• CNo encryption is applied.
• DThe gateway will not respond.

• A
  67% (14)
• B
  19% (4)
• C
  10% (2)
• D
  5% (1)

Explanation

In an AOS-10 "Enhanced Open" SSID (WPA3 OWE - Opportunistic Wireless Encryption), the client and AP perform an unauthenticated Diffie-Hellman exchange to negotiate per-session encryption, meaning Authenticated DH is never involved - making A correct. Option B is wrong because Enhanced Open is a credential-free, open network; no RADIUS server is consulted for authentication. Option C is wrong because OWE's entire purpose is to provide over-the-air encryption even without a passphrase - encryption is absolutely applied. Option D is wrong because in AOS-10 mixed forwarding mode with a bridged VLAN, the gateway participates normally in the data path and responds as expected.

Memory tip: Think "Enhanced but not Authenticated" - OWE enhances a plain open SSID by adding DH-based encryption, but the DH is anonymous/unauthenticated. If you see "Authenticated DH" paired with "open Enhanced Open SSID," that's the mismatch the exam is testing.

No community discussion yet for this question.