200-301 Question 252
Select 3A network administrator is configuring a wireless LAN (WLAN) for client connectivity in a corporate environment. They are using a wireless LAN controller (WLC) and have accessed the WLAN GUI configuration settings. Which of the following settings must be properly configured to ensure secure client connectivity?
- A
SSID broadcast enabled
- B
WPA2 or WPA3 security selected
- C
Authentication method set to 'Open'
- D
Pre-shared key or 802.1X authentication configuration
- E
Channel selection set to automatic
- F
VLAN ID assigned to the WLAN
Show answer and explanation
Correct answers: B, D, F
Explanation
To ensure secure client connectivity, the network administrator must configure proper security protocols (WPA2 or WPA3), a secure authentication method (pre-shared key or 802.1X), and segment the WLAN traffic using VLANs. Other settings, such as SSID broadcast and channel selection, contribute to usability or performance but are not mandatory for secure connectivity.
- A. Incorrect.
SSID broadcast enabled helps clients discover the network, but it is not a mandatory setting for secure connectivity. Disabling SSID broadcast can improve security by hiding the WLAN, but it is not the focus of ensuring client connectivity.
- B. Correct.
WPA2 or WPA3 is fundamental for secure encryption and authentication. Using weaker security protocols, such as WEP, is no longer recommended.
- C. Incorrect.
Setting the authentication method to 'Open' does not provide any security and is not appropriate for secure client connectivity in a corporate environment.
- D. Correct.
A pre-shared key or 802.1X authentication is required to enforce secure client authentication. Without this configuration, clients may not connect securely to the WLAN.
- E. Incorrect.
Automatic channel selection helps optimize network performance by reducing interference, but it is not directly related to secure client connectivity.
- F. Correct.
Assigning a VLAN ID to the WLAN ensures proper network segmentation, which is essential for securing wireless traffic and isolating it from other parts of the network.