350-401 exam dumps

350-401 practice question 263 of 631

Implementing Cisco Enterprise Network Core Technologies. Professional level, Cisco. Free question with the correct answer and a full explanation.

350-401 Question 263

Single answer

A network administrator is tasked with securing the wireless network in a corporate environment. The company uses WPA3-Personal for its wireless security and wants to prevent unauthorized devices from accessing the network while ensuring the strongest encryption available. Which feature should the administrator configure to meet these requirements?

  1. A

    WPA2-Enterprise with RADIUS authentication

  2. B

    WPA3-Personal with SAE (Simultaneous Authentication of Equals)

  3. C

    MAC filtering for all wireless clients

  4. D

    WEP with a 128-bit encryption key

Show answer and explanation

Correct answer: B

Explanation

WPA3-Personal with SAE (Simultaneous Authentication of Equals) provides the strongest encryption available for personal wireless networks and prevents unauthorized access by using advanced authentication mechanisms. It is specifically designed to address security weaknesses in WPA2 and is the recommended option for securing a wireless network in a corporate or personal environment.

  • A. Incorrect.

    WPA2-Enterprise with RADIUS authentication is a strong security option, but it is not WPA3-Personal. It is typically used in enterprise environments requiring centralized authentication, not for WPA3-Personal configurations.

  • B. Correct.

    WPA3-Personal with SAE (Simultaneous Authentication of Equals) is the correct option. SAE enhances security by providing forward secrecy and resistance to offline dictionary attacks, making it ideal for WPA3-Personal environments.

  • C. Incorrect.

    MAC filtering can provide basic security by restricting device access based on MAC addresses, but it is not sufficient to meet the requirements for the strongest encryption or to prevent unauthorized access in a secure manner.

  • D. Incorrect.

    WEP with a 128-bit encryption key is outdated and insecure. It does not meet modern security standards and should not be used in any scenario requiring strong encryption.

Timed practice exam

Take a 350-401 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam