350-401 Question 281
Single answerA network administrator is troubleshooting a wireless connectivity issue between a client device and a WPA2-Enterprise secured network. Upon reviewing the logs, the administrator notices that the EAPOL 4-way handshake fails after the third message. What could be the most likely reason for this failure?
- A
The client device does not support the encryption cipher used by the access point.
- B
The access point has incorrect RADIUS server credentials configured.
- C
The client device's pre-shared key does not match the key on the access point.
- D
The access point's Group Temporal Key (GTK) has expired.
Show answer and explanation
Correct answer: A
Explanation
The EAPOL 4-way handshake is a critical part of the WPA2 authentication process, used to establish encryption keys between the client and the access point. It involves verifying that both the client and the access point can support the same encryption cipher and exchanging session keys. If the client device does not support the encryption cipher configured on the access point, the handshake cannot be completed, causing the failure.
- A. Correct.
If the client device does not support the encryption cipher used by the access point, the 4-way handshake will fail, as the encryption parameters cannot be agreed upon.
- B. Incorrect.
While incorrect RADIUS server credentials can prevent authentication, this issue would occur earlier in the EAP process, not during the 4-way handshake.
- C. Incorrect.
A mismatch in pre-shared keys would typically only occur in WPA2-Personal networks, not WPA2-Enterprise, which uses dynamic keys instead of pre-shared keys.
- D. Incorrect.
The expiration of the Group Temporal Key (GTK) is not directly related to the failure of the EAPOL 4-way handshake.