350-401 exam dumps

350-401 practice question 264 of 631

Implementing Cisco Enterprise Network Core Technologies. Professional level, Cisco. Free question with the correct answer and a full explanation.

350-401 Question 264

Select 2

A company is deploying a new wireless network and wants to ensure that only authorized devices can connect to their wireless access points. They also want to encrypt the traffic between the client devices and the access points to protect sensitive information. Which wireless security feature(s) should be configured to meet these requirements?

  1. A

    Enable WPA3 authentication on the wireless access points

  2. B

    Implement MAC address filtering for device authentication

  3. C

    Configure a pre-shared key (PSK) for WPA2 security

  4. D

    Enable 802.1X authentication with a RADIUS server

  5. E

    Use WEP (Wired Equivalent Privacy) for encryption

Show answer and explanation

Correct answers: A, D

Explanation

To ensure only authorized devices can connect to the wireless network and to encrypt traffic, WPA3 provides robust security for modern wireless networks. Additionally, 802.1X authentication with a RADIUS server offers strong, enterprise-grade access control by verifying user credentials. Other options like MAC address filtering or WEP are either insufficient or insecure, while PSK may not meet enterprise-level security requirements.

  • A. Correct.

    WPA3 provides enhanced encryption and authentication mechanisms, ensuring secure communication between clients and the wireless access points. It is one of the most secure options available for wireless networks.

  • B. Incorrect.

    MAC address filtering provides a basic layer of device authentication by allowing or denying devices based on their MAC addresses. However, it is not a reliable security method because MAC addresses can be spoofed.

  • C. Incorrect.

    While a pre-shared key (PSK) can provide some level of security, it is considered less secure than 802.1X or WPA3. PSK is more suitable for smaller networks without enterprise-level requirements.

  • D. Correct.

    802.1X authentication with a RADIUS server ensures that only authorized users and devices can connect to the wireless network. It provides strong authentication and integrates well with enterprise environments.

  • E. Incorrect.

    WEP is an outdated and insecure wireless encryption protocol that is vulnerable to attacks. It should not be used in modern wireless network deployments.

Timed practice exam

Take a 350-401 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam