200-901 Network Fundamentals Practice Question
Which wireless security standard provides the strongest encryption and is recommended for enterprise networks as of 2023?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
WPA3
WPA3 is the latest standard with stronger encryption (SAE) and is recommended for modern networks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
WEP
Why it's wrong here
WEP's RC4 stream cipher with static, reusable keys is trivially cracked, so it cannot meet a 2023 enterprise standard. It tempts as the original 802.11 privacy mechanism, and would only be relevant for legacy hardware that cannot negotiate anything newer.
- ✗
TKIP
Why it's wrong here
TKIP was a firmware patch for WEP-era hardware, retaining RC4 and adding per-packet key mixing; it is deprecated and broken. It tempts because it shipped with WPA and improved on WEP, so it would suffice only for legacy devices lacking AES-capable radios.
- ✓
WPA3
Why this is correct
WPA3 mandates SAE (Simultaneous Authentication of Equals), replacing WPA2's PSK handshake and providing forward secrecy plus 192-bit Enterprise mode. That stronger encryption and resistance to offline dictionary attacks make it the recommended enterprise standard, satisfying the 2023 requirement.
- ✗
WPA2
Why it's wrong here
WPA2's AES-CCMP is strong, but WPA3, mandatory since 2020, adds SAE and forward secrecy, making it the 2023 enterprise recommendation. It tempts because WPA2 remains widely deployed and secure, and would be the answer for networks without WPA3-capable hardware.
About these practice questions
This 200-901 question is part of Courseiva's 975-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-901 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-901 exam.