N10-009 Network Implementation Practice Question
A network engineer is deploying a wireless network using 802.11ac. To allow clients to roam between access points without re-authenticating to the authentication server, which IEEE standard should be implemented?
⚠ Common exam trap
The N10-009 exam often tests the distinction between 802.1X (authentication framework) and 802.11r (fast roaming), leading candidates to mistakenly choose 802.1X because they associate it with 'authentication' without realizing the question specifically asks about avoiding re-authentication during roaming.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
802.11r
802.11r, also known as Fast BSS Transition (FT), enables clients to roam between access points using a cached Pairwise Master Key (PMK) without requiring a full 802.1X/EAP re-authentication with the RADIUS server. This reduces roaming latency to under 50 ms, which is critical for voice and video applications.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
802.1X
Why it's wrong here
IEEE 802.1X is a port-based network access control standard used for authenticating devices attempting to connect to a network, both wired and wireless. It leverages the Extensible Authentication Protocol (EAP) and often integrates with a RADIUS server to verify user or device credentials before granting network access. While critical for secure network entry, 802.1X itself is an authentication framework and does not inherently provide mechanisms for fast client roaming between different access points.
When this WOULD be correct
802.1X would be correct if the question asked for the standard that provides port-based authentication for wired and wireless networks, typically used with EAP methods to authenticate users before granting network access.
- ✓
802.11r
Why this is correct
IEEE 802.11r, also known as Fast BSS Transition, is the standard specifically designed to enable fast and secure roaming for wireless clients. It minimizes the time required for a client to reassociate from one access point (AP) to another within the same extended service set (ESS) by pre-authenticating with target APs. This significantly reduces latency during handoffs, which is crucial for delay-sensitive applications like Voice over IP (VoIP) or streaming video.
- ✗
802.11i
Why it's wrong here
IEEE 802.11i is the security standard that forms the basis for Wi-Fi Protected Access 2 (WPA2), providing robust security for wireless networks. It defines the Robust Security Network (RSN) and mandates the use of AES-CCMP for strong encryption and integrity, along with 802.1X for authentication. Its primary purpose is to ensure data confidentiality and integrity, protecting against unauthorized access and eavesdropping, rather than facilitating rapid client transitions between access points.
When this WOULD be correct
802.11i would be correct if the question asked: 'Which IEEE standard defines security enhancements for wireless networks, including the use of AES-CCMP encryption and 802.1X authentication?'
- ✗
802.11e
Why it's wrong here
IEEE 802.11e is an amendment that provides Quality of Service (QoS) enhancements for wireless networks, primarily through Wi-Fi Multimedia (WMM). It defines mechanisms to prioritize different types of network traffic, such as voice and video, over best-effort data, ensuring a better user experience for real-time applications. However, 802.11e focuses on managing traffic after a connection is established and does not directly facilitate faster client roaming between access points.
When this WOULD be correct
802.11e would be correct in a question about prioritizing voice or video traffic over a WLAN, such as: 'Which IEEE standard provides QoS for wireless multimedia applications?'
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.
✓802.11rCorrect answer▾
Why this is correct
IEEE 802.11r, also known as Fast BSS Transition, is the standard specifically designed to enable fast and secure roaming for wireless clients. It minimizes the time required for a client to reassociate from one access point (AP) to another within the same extended service set (ESS) by pre-authenticating with target APs. This significantly reduces latency during handoffs, which is crucial for delay-sensitive applications like Voice over IP (VoIP) or streaming video.
✗802.1XWrong answer — click to see why▾
Why this is wrong here
802.1X is an authentication framework used for port-based network access control, not a roaming standard. It requires re-authentication when roaming between access points unless combined with a fast roaming protocol like 802.11r.
★ When this WOULD be the correct answer
802.1X would be correct if the question asked for the standard that provides port-based authentication for wired and wireless networks, typically used with EAP methods to authenticate users before granting network access.
Why candidates choose this
Candidates often confuse 802.1X with roaming because it is commonly used in enterprise WLANs for authentication, and they may think it handles roaming seamlessly without realizing that re-authentication overhead is a separate issue.
✗802.11iWrong answer — click to see why▾
Why this is wrong here
802.11i (WPA2) provides security (encryption and authentication) but does not handle fast roaming without re-authentication to the authentication server. The question specifically asks for a standard that allows clients to roam without re-authenticating, which is addressed by 802.11r (Fast Roaming).
★ When this WOULD be the correct answer
802.11i would be correct if the question asked: 'Which IEEE standard defines security enhancements for wireless networks, including the use of AES-CCMP encryption and 802.1X authentication?'
Why candidates choose this
Candidates often confuse 802.11i with roaming because it is a common wireless security standard, and they may incorrectly associate its authentication mechanisms with seamless roaming.
✗802.11eWrong answer — click to see why▾
Why this is wrong here
802.11e defines QoS enhancements for wireless networks, not fast roaming or authentication caching. The question asks for a standard that allows clients to roam without re-authenticating, which is addressed by 802.11r, not 802.11e.
★ When this WOULD be the correct answer
802.11e would be correct in a question about prioritizing voice or video traffic over a WLAN, such as: 'Which IEEE standard provides QoS for wireless multimedia applications?'
Why candidates choose this
Candidates may confuse 802.11e with 802.11r because both are '802.11' amendments related to improving client experience, and the 'e' might be mistakenly associated with 'efficient' roaming.
Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Quick reference
AAA Protocol Comparison
| Protocol | Port(s) | Encryption | Transport | Primary Use |
|---|---|---|---|---|
| RADIUS | 1812 / 1813 | Password only | UDP | Network access control |
| TACACS+ | 49 | Full packet | TCP | Device administration |
| Diameter | 3868 | Full session | TCP / SCTP | Carrier / mobile networks |
| 802.1X | — | EAP-based | Layer 2 | Port-based access control |
TACACS+ encrypts the entire packet; RADIUS only encrypts the password field — a key exam distinction.
Go deeper
Related to this question
Learn chapter
Wireless Standards and Configuration
Key term
RADIUS
RADIUS is a network protocol that provides centralized authentication, authorization, and accounting management for users who connect and use a network service.
Key term
BSSID
A BSSID is the MAC address of an access point's radio interface, uniquely identifying a wireless cell in a WLAN.
About these practice questions
Courseiva writes every N10-009 question from scratch — 464 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This N10-009 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the N10-009 exam.