mediumMultiple Choice
220-1102 Practice Question: A technician is configuring a wireless network…
A technician is configuring a wireless network for a school that uses Chromebooks and iPads. The network must support fast roaming and prioritize security. The technician enables WPA2-Enterprise with 802.1X. What additional configuration is needed to ensure seamless roaming between access points?
⚠ Common exam trap
A common misconception in CompTIA A+ is that simply using the same SSID and passphrase (Option B) is sufficient for seamless roaming, but in WPA2-Enterprise, the passphrase is not used, and without 802.11r, clients must perform a full 802.1X re-authentication at each AP, causing noticeable delays.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable 802.11r (Fast Roaming) on the wireless controller.
802.11r (Fast Roaming) enables seamless key distribution between access points during client transitions, eliminating the need for full re-authentication with the RADIUS server. This is essential for devices like Chromebooks and iPads that move frequently across a school campus, ensuring low-latency roaming while maintaining WPA2-Enterprise security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable WPA3-SAE on all access points.
Why it's wrong here
WPA3-SAE replaces WPA2-PSK's four-way handshake with a simultaneous authentication of equals, protecting against offline dictionary attacks. It does not accelerate roaming, and enabling it would conflict with the WPA2-Enterprise already configured. SAE suits small networks using a shared passphrase, not 802.1X deployments.
- ✗
Configure all access points with the same SSID and passphrase.
Why it's wrong here
Identical SSID and passphrase let clients recognise the network, but WPA2-Enterprise derives unique per-session keys, so every AP association requires a full 802.1X authentication. Fast roaming needs PMK caching or 802.11r, which reuse keys across access points. Shared credentials suit WPA2-Personal, not Enterprise.
- ✓
Enable 802.11r (Fast Roaming) on the wireless controller.
Why this is correct
802.11r enables fast BSS transition, letting clients pre-authenticate with the target access point and skip full 802.1X re-authentication during roaming. This satisfies the school's requirement for seamless roaming while retaining WPA2-Enterprise security across Chromebooks and iPads.
- ✗
Disable WPS on all access points.
Why it's wrong here
WPS governs how clients join a network using a PIN or push button; it plays no part in roaming between access points. Disabling it hardens onboarding against brute-force PIN attacks, but does nothing to speed reassociation or key caching during handover.
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
Learn chapter
Network Topology Documentation
Key term
Remote Authentication Dial-in User Service
RADIUS is a network protocol that provides centralized authentication, authorization, and accounting for users trying to connect to a network service.
Key term
RADIUS
RADIUS is a network protocol that provides centralized authentication, authorization, and accounting management for users who connect and use a network service.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 687 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.