200-301 exam dumps

200-301 practice question 451 of 506

Cisco Certified Network Associate. Free level, Cisco. Free question with the correct answer and a full explanation.

200-301 Question 451

Single answer

A network administrator is tasked with securing a new wireless network. The network will handle sensitive data and must be protected against modern threats, including brute-force attacks and key reinstallation attacks (KRACK). Which wireless security protocol should the administrator implement to ensure the highest level of security?

  1. A

    WPA

  2. B

    WPA2 with TKIP

  3. C

    WPA2 with AES

  4. D

    WPA3

Show answer and explanation

Correct answer: D

Explanation

WPA3 is the most advanced and secure wireless security protocol currently available. It addresses vulnerabilities found in WPA2, including protections against brute-force attacks and KRACK. For a network handling sensitive data, WPA3 is the recommended choice to ensure the highest level of security.

  • A. Incorrect.

    WPA (Wi-Fi Protected Access) is an older protocol that has known vulnerabilities and does not provide sufficient protection against modern threats such as key reinstallation attacks.

  • B. Incorrect.

    WPA2 with TKIP (Temporal Key Integrity Protocol) is an outdated configuration. While WPA2 is more secure than WPA, using TKIP is discouraged because it is less secure than AES and vulnerable to certain attacks.

  • C. Incorrect.

    WPA2 with AES (Advanced Encryption Standard) provides strong security and is widely used, but it does not protect against all modern threats, such as KRACK, which affects WPA2.

  • D. Correct.

    WPA3 is the latest wireless security protocol and includes features such as Simultaneous Authentication of Equals (SAE) to mitigate brute-force attacks and protection against KRACK, making it the most secure choice for modern networks.

Timed practice exam

Take a 200-301 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam