220-1202 Practice Test 26 — 15 Questions

Question 1

A company's IT policy requires that all wireless traffic be encrypted using the strongest available protocol. A technician is configuring a new access point that supports WPA3-SAE, WPA2-PSK with AES, and WPA2-PSK with TKIP. Which configuration meets the policy?

Accepted Answer

WPA3-SAE.. WPA3-SAE is the strongest available wireless security protocol, providing forward secrecy and stronger authentication than WPA2. It is the correct choice for maximum security.

Answer

WPA2-PSK with TKIP.

Answer

WPA2-PSK with AES.

Answer

A mixed mode of WPA2 and WPA3.

Question 2

A technician is troubleshooting a wireless network where users report intermittent connectivity. The network uses WPA2-Enterprise with a RADIUS server. The technician notices that the RADIUS server logs show frequent authentication failures from one specific access point. What is the most likely cause?

Accepted Answer

The access point's RADIUS shared secret is incorrect.. A mismatched pre-shared key or RADIUS secret between the access point and the RADIUS server will cause authentication failures. Other options like channel interference or encryption mismatch would not specifically show RADIUS authentication failures.

Answer

The access point is using a different channel than the others.

Answer

The RADIUS server certificate has expired.

Answer

The clients are using WPA2-PSK instead of WPA2-Enterprise.

Question 3

A security incident occurs where an attacker captures the 4-way handshake of a WPA2-PSK network and successfully cracks the passphrase offline. The technician is tasked with preventing this type of attack in the future. Which protocol should the technician implement?

Accepted Answer

WPA3-SAE.. WPA3-SAE uses Simultaneous Authentication of Equals (SAE), which provides forward secrecy and prevents offline dictionary attacks. WPA2-PSK is vulnerable to handshake capture and offline cracking.

Answer

WPA2-PSK with a longer passphrase.

Answer

WPA2-Enterprise with PEAP-MSCHAPv2.

Answer

WPA2-PSK with TKIP.

Question 4

A technician is configuring a wireless network for a school that uses Chromebooks and iPads. The network must support fast roaming and prioritize security. The technician enables WPA2-Enterprise with 802.1X. What additional configuration is needed to ensure seamless roaming between access points?

Accepted Answer

Enable 802.11r (Fast Roaming) on the wireless controller.. Fast roaming (802.11r) allows clients to quickly re-authenticate when moving between access points, reducing latency. WPA2-Enterprise alone does not provide fast roaming; 802.11r must be enabled on the controller and access points.

Answer

Enable WPA3-SAE on all access points.

Answer

Configure all access points with the same SSID and passphrase.

Answer

Disable WPS on all access points.

Question 5

A small business owner reports that after upgrading their wireless router to a newer model, their older laptops running Windows 7 cannot connect to the Wi-Fi network. The new router is configured with WPA3-Personal. Which of the following is the most likely reason for the connectivity failure?

Accepted Answer

The laptops' wireless adapters do not support WPA3.. WPA3 is not supported on older operating systems like Windows 7, which only support up to WPA2. The correct solution is to either downgrade to WPA2 or update the wireless adapter drivers if possible. This question tests knowledge of backward compatibility between WPA2 and WPA3.

Answer

The router's SSID is hidden.

Answer

The router is broadcasting on a 5 GHz band only.

Answer

The laptops have incorrect DNS settings.

Question 6

A customer calls saying their home Wi-Fi network suddenly stopped working after they changed the router's security mode from WPA2-PSK to WPA2-Enterprise. All their devices previously connected fine. What is the most likely cause of the problem?

Accepted Answer

The router is now requiring a username and password from a RADIUS server, which the home network lacks.. WPA2-Enterprise requires a RADIUS authentication server, which is not present in a typical home network. WPA2-PSK uses a pre-shared key, which is standard for home use. This question tests the understanding of the difference between Personal and Enterprise modes.

Answer

The router's firmware is outdated.

Answer

The devices do not support the new encryption cipher.

Answer

The SSID was changed during the configuration.

Question 7

During a security audit at a law firm, the IT manager wants to ensure that all wireless communication is encrypted with the strongest available standard that is also compatible with their mix of Windows 10 laptops and iOS tablets. Which security protocol should you recommend?

Accepted Answer

WPA3-Personal. WPA3 is the latest Wi-Fi security standard, offering stronger encryption (GCMP-256) and improved authentication (SAE). It is backward compatible with WPA2 devices, making it suitable for mixed environments. This question tests knowledge of current wireless security standards and their compatibility.

Answer

WEP

Answer

WPA2-TKIP

Answer

WPA2-Enterprise

Question 8

A user reports that their Windows 11 laptop can see the office Wi-Fi network but fails to connect, displaying 'Can't connect to this network'. Other users with the same laptop model connect without issues. The network uses WPA2-PSK with AES. What should you check first?

Accepted Answer

Forget the network on the laptop and reconnect by entering the passphrase again.. A mismatch in the saved passphrase is a common cause of connection failures when the network is visible. The correct answer is to forget the network and re-enter the correct passphrase. This tests troubleshooting skills for wireless authentication issues.

Answer

Update the wireless adapter driver.

Answer

Change the router's security protocol to WPA3.

Answer

Disable the firewall on the laptop.

Question 9

A company's IT policy requires that all wireless connections use certificate-based authentication to prevent unauthorized access. The network is currently using WPA2-PSK. Which configuration change is necessary to meet this policy?

Accepted Answer

Switch to WPA2-Enterprise and configure a RADIUS server.. Certificate-based authentication is a feature of WPA2-Enterprise (802.1X), not WPA2-Personal. This requires a RADIUS server and PKI infrastructure. The question tests the understanding of the difference between Personal and Enterprise modes.

Answer

Enable MAC address filtering on the access point.

Answer

Upgrade to WPA3-Personal.

Answer

Change the encryption from AES to TKIP.

Question 10

A technician is setting up a guest Wi-Fi network in a coffee shop. The owner wants customers to be able to connect easily without entering a password, but still wants basic encryption to prevent eavesdropping. Which security configuration should the technician use?

Accepted Answer

Set up an open network with no encryption and a captive portal for terms of service.. WPA3-Personal offers an 'Enhanced Open' mode (OWE) that provides encryption without a password, but WPA2-PSK with a simple password is more common. However, the scenario explicitly asks for 'no password' and 'basic encryption'. The correct answer is to use an open network with a captive portal, but that doesn't provide encryption. The best compromise is to use WPA3-Enhanced Open (OWE) if supported, but since that may not be an option, the technician might use an open network with a captive portal. Among the options, the correct one is to use an open network with a captive portal for ease of access, but encryption is not provided. However, the question expects the technician to explain that an open network cannot provide encryption. The correct answer is to use a captive portal on an open network, acknowledging the lack of encryption. This tests understanding of trade-offs between security and convenience.

Answer

Use WPA2-PSK with a simple password like 'coffee123'.

Answer

Enable WPA3-Enterprise with certificate-based authentication.

Answer

Use WEP with a shared key printed on a receipt.

Question 11

A user's laptop running Windows 10 Pro connects to the corporate Wi-Fi but cannot access internal resources. The network uses WPA2-Enterprise with PEAP-MSCHAPv2. The laptop's wireless profile is configured correctly. Other users in the same office can access resources. What is the most likely cause?

Accepted Answer

The user's domain account is locked or the password has expired.. In a WPA2-Enterprise environment, the user's domain credentials are used for authentication. If the account is locked or the password has expired, authentication will fail even though the wireless association succeeds. This tests understanding of enterprise authentication integration.

Answer

The laptop's wireless adapter is faulty.

Answer

The access point is broadcasting on a congested channel.

Answer

The laptop has an incorrect IP address from DHCP.

Question 12

During a wireless site survey, a technician discovers that an employee has set up a personal wireless router in their cubicle, connected to the corporate network. This rogue access point is broadcasting an open SSID. Which security risk is most immediately concerning?

Accepted Answer

The rogue AP provides an unencrypted entry point for attackers to access the corporate network.. An open rogue access point allows anyone within range to connect to the corporate network without authentication, bypassing all security controls. This is a severe security incident. The question tests knowledge of rogue AP risks and the importance of wireless security policies.

Answer

The rogue AP may cause radio frequency interference with the corporate WLAN.

Answer

The rogue AP will consume additional power from the corporate UPS.

Answer

The rogue AP's DHCP server may conflict with the corporate DHCP server.

Question 13

A company's security policy mandates that all wireless traffic must be encrypted using a protocol that is resistant to KRACK attacks. The current network uses WPA2-PSK with AES. Which of the following upgrades should be implemented to meet this requirement?

Accepted Answer

Upgrade to WPA3-Personal.. KRACK attacks exploit vulnerabilities in the WPA2 protocol's four-way handshake. WPA3 is designed to mitigate these attacks through the use of SAE (Simultaneous Authentication of Equals) and 256-bit encryption. This question tests knowledge of specific vulnerabilities and the corresponding protocol improvements.

Answer

Change the encryption from AES to TKIP.

Answer

Enable WPA2-Enterprise with 802.1X.

Answer

Implement MAC address filtering.

Question 14

A network administrator is configuring a new wireless network for a hospital that requires the highest level of security for patient data. The network must support 802.1X authentication with smart cards. Which combination of security protocols and authentication methods should be used?

Accepted Answer

WPA2-Enterprise with EAP-TLS.. WPA2-Enterprise (or WPA3-Enterprise) with EAP-TLS provides certificate-based authentication, which can use smart cards. EAP-TLS is considered the most secure because it requires both client and server certificates. This tests knowledge of enterprise authentication methods and their security levels.

Answer

WPA2-PSK with PEAP-MSCHAPv2.

Answer

WPA3-Personal with SAE.

Answer

WPA3-Enterprise with EAP-TTLS.

Question 15

A small business owner reports that after upgrading their wireless router to a newer model, several older laptops running Windows 7 can no longer connect to the Wi-Fi network. The new router is configured to use WPA3. What is the most likely reason for the connection failures?

Accepted Answer

The laptops have outdated wireless drivers that do not support WPA3.. WPA3 is the latest wireless security protocol, but it is not backward-compatible with older operating systems like Windows 7, which only support WPA2. The technician should configure the router to use WPA2/WPA3 mixed mode or WPA2 only to ensure compatibility with all devices.

Answer

The router's firewall is blocking the older laptops' MAC addresses.

Answer

The laptops are using an incompatible encryption cipher like TKIP.

Answer

The router's SSID is hidden, and the laptops cannot discover it.