220-1101 Question 318
Single answerWirelessA small office recently replaced its wireless router. Since the change, employees report that laptops and smartphones can see the new SSID but are unable to join it. When they attempt to connect, the devices immediately display an authentication error. The office manager confirms the correct wireless password is being entered, and a technician verifies the internet connection to the router is working. You log in to the router and see that the wireless security mode is set to WPA3-Personal only. Several employee devices are 4 to 6 years old. Which action is the BEST way to restore wireless access for the office while maintaining reasonable security?
- A
Disable wireless encryption temporarily so all devices can connect, then re-enable security later
- B
Change the wireless security mode to WPA2/WPA3 mixed mode
- C
Switch the router to WEP because it is compatible with older wireless devices
- D
Increase the router's transmit power to improve authentication reliability
Show answer and explanation
Correct answer: B
Explanation
The key detail is that devices can detect the SSID but fail immediately with an authentication error after the router was set to WPA3-Personal only. Many older client devices do not support WPA3, so they cannot complete authentication even when the correct password is entered. In this scenario, the best corrective action is to configure WPA2/WPA3 mixed mode so older devices can use WPA2-Personal while newer devices continue to benefit from WPA3 support. This aligns with practical wireless deployment best practices: use the strongest security supported by the client environment without unnecessarily breaking compatibility. CompTIA A+ Core 1 objectives include identifying wireless security standards such as WPA2 and WPA3 and applying them appropriately in real-world troubleshooting situations. Industry guidance from Wi-Fi Alliance and vendor documentation commonly recommends WPA2 or WPA3, with transitional or mixed modes used during upgrades from older client hardware.
- A. Incorrect.
This is incorrect. Disabling encryption may allow devices to connect, but it creates a major security risk and is not an acceptable business solution except possibly for very limited testing. The issue described is authentication compatibility, not signal presence or internet connectivity.
- B. Correct.
This is correct. WPA2/WPA3 mixed mode allows newer devices to use WPA3 while permitting older devices that do not support WPA3 to authenticate with WPA2-Personal. In a mixed-device office, this is often the best practical balance between compatibility and security.
- C. Incorrect.
This is incorrect. WEP is obsolete and insecure due to well-known cryptographic weaknesses. Although very old devices may support it, using WEP in a business environment would be a poor and unsafe choice. Modern best practice is to use WPA2 or WPA3, not legacy WEP.
- D. Incorrect.
This is incorrect. Transmit power affects coverage and signal strength, not whether a client supports the selected authentication standard. Because the devices can already see the SSID, the problem is not discovery or range; it is security-mode compatibility.