N10-005 · Question #653
An 801.11g wireless access point was configured as follows: - AP encryption forced to WPA2-AES mode only - MAC address filtering enabled with the following MAC address in the allow list…
The correct answer is C. An 802.11n compatible client can connect to the wireless network only if its MAC address is. Two security controls are in place: WPA2-AES only encryption, and MAC address filtering with a specific allow list. 802.11n is backward compatible with 802.11g, so an 802.11n client can communicate with an 802.11g AP. However, both conditions must be met: the client must…
Question
An 801.11g wireless access point was configured as follows:
- AP encryption forced to WPA2-AES mode only
- MAC address filtering enabled with the following MAC address in the
allow list: 00-ab-29-da-c3-40 Which is true about the above configuration?
Options
- AAny 802.11b/g compatible client can connect to the wireless network if they support TKIP,
- BAn 802.11a compatible client can connect to the wireless network only if its MAC address is
- CAn 802.11n compatible client can connect to the wireless network only if its MAC address is
- DAny 802.11g compatible client can connect to the wireless network if the encryption key is known
How the community answered
(23 responses)- A17% (4)
- B9% (2)
- C70% (16)
- D4% (1)
Explanation
Two security controls are in place: WPA2-AES only encryption, and MAC address filtering with a specific allow list. 802.11n is backward compatible with 802.11g, so an 802.11n client can communicate with an 802.11g AP. However, both conditions must be met: the client must support WPA2-AES encryption AND its MAC address must be in the allow list. Only the single MAC address listed (00-ab-29-da-c3-40) is permitted. 802.11b/g clients using TKIP cannot connect because the AP forces WPA2-AES only. 802.11a clients operate in the 5 GHz band and cannot connect to a 2.4 GHz 802.11g AP at all. 802.11g clients cannot connect just by knowing the key; their MAC address must also be on the allow list.
Topics
Community Discussion
No community discussion yet for this question.