easyMultiple ChoiceObjective-mapped
SSCP Secure wireless communication for guests Practice Question
A company wants to secure wireless communication for guests. Which protocol provides the strongest encryption for a wireless network?
⚠ Common exam trap
Many exam-takers assume WPA2-PSK with AES is the strongest because it uses AES encryption, but they overlook the vulnerability of the PSK authentication method to offline dictionary attacks, which WPA3-SAE specifically addresses with SAE.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
WPA3-SAE
WPA3-SAE (Simultaneous Authentication of Equals) provides the strongest encryption for wireless networks, using 128-bit AES in CCMP mode for encryption and replacing the Pre-Shared Key (PSK) exchange with a more secure handshake that resists offline dictionary attacks. This makes it the most secure option among the choices, especially for guest networks where authentication security is critical.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
WEP with 128-bit key
Why it's wrong here
WEP is broken and should not be used.
- ✗
WPA2-PSK with TKIP
Why it's wrong here
TKIP is deprecated and vulnerable.
- ✗
WPA2-PSK with AES
Why it's wrong here
WPA2-PSK with AES is secure but not as strong as WPA3.
- ✓
WPA3-SAE
Why this is correct
WPA3-SAE offers the strongest encryption and authentication.
Quick reference
Symmetric Encryption Algorithm Comparison
| Algorithm | Key Size | Block Size | Status | Notes |
|---|---|---|---|---|
| AES-128 | 128-bit | 128-bit | Current standard | NIST approved; WPA3, TLS |
| AES-256 | 256-bit | 128-bit | Current standard | Preferred for sensitive / govt data |
| 3DES | 112-bit effective | 64-bit | Deprecated (2023) | Replaced by AES |
| DES | 56-bit | 64-bit | Broken | Cracked in < 24 h; never deploy |
| ChaCha20 | 256-bit | Stream cipher | Current | TLS 1.3, WireGuard |
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.