hardMultiple SelectObjective-mapped
350-701 Practice Question: Which TWO of the following are true about MACsec?
Which TWO of the following are true about MACsec?
⚠ Common exam trap
Cisco often tests the misconception that MACsec is a Layer 3 or application-layer security protocol, but the trap here is that candidates confuse it with IPsec (Layer 3) or WLAN security (Layer 2 but wireless), when MACsec is strictly a Layer 2 wired Ethernet security standard.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It uses IEEE 802.1AE standard
MACsec is defined by the IEEE 802.1AE standard, which specifies a security protocol for providing data confidentiality, integrity, and origin authenticity at Layer 2. It operates directly on Ethernet frames, encrypting the payload while preserving the frame header for transparent forwarding. This makes option B correct because the standard is the foundational reference for MACsec.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
It requires a PKI
Why it's wrong here
MACsec can use pre-shared keys; PKI is optional.
- ✓
It uses IEEE 802.1AE standard
Why this is correct
MACsec is defined by IEEE 802.1AE.
- ✗
It provides data confidentiality only
Why it's wrong here
MACsec also provides integrity and authentication.
- ✗
It is used for WLAN security
Why it's wrong here
MACsec is designed for wired Ethernet, not wireless.
- ✓
It operates at Layer 2
Why this is correct
MACsec is a Layer 2 encryption standard.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.