ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-401 All Questions

View all questions & answers for the 350-401 exam
Go to Exam

Exam 350-401 topic 1 question 188 discussion

Actual exam question from Cisco's 350-401
Question #: 188
Topic #: 1
[All 350-401 Questions]

A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To configure the employee WLAN, which two Layer 2 security policies should be used? (Choose two.)

  • A. WPA2 (AES)
  • B. 802.1X
  • C. OPEN
  • D. WEP
  • E. WPA (AES)
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by [deleted] at May 10, 2021, 5:41 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 4 years, 2 months ago
The given answer is correct
upvoted 16 times
uhljeb
2 years, 3 months ago
No, it's not.
upvoted 3 times
...
...
xziomal9
Highly Voted 3 years, 10 months ago
The correct answer is: B. 802.1X C. OPEN
upvoted 13 times
...
zbeugene7
Most Recent 2 months ago
Selected Answer: AC
A&C, because B and C are nutually exclusive, having OPEN for trusted users would work well with AES encryption
upvoted 1 times
...
dablais
1 year ago
Selected Answer: AB
Leaving it OPEN is not a security feature....
upvoted 1 times
...
Claudiu1
1 year, 4 months ago
I see the debate is between AB and BC combos. My question about BC is: how can you you have both Open Authentication and 802.1X authentication on the same WLAN? I understand about using Open authentication with a security suite such as WPA2/WPA3, but how would OPEN + 802.1X work?
upvoted 3 times
...
cloud29
1 year, 5 months ago
Selected Answer: AB
Its AB lol
upvoted 2 times
...
mgiuseppe86
1 year, 10 months ago
Selected Answer: BC
802.1x without a doubt is an answer. Regarding the A/C Debate, you would not secure a wifi 6 environment with WPA2, and it is a trusted employee WLAN. I currently do this where I am eployed now and the trusted OPEN Network with 802.1x allows for enhanced security.
upvoted 3 times
...
tsamoko
1 year, 11 months ago
yeah , they are right WPA2 is not supported so B & C https://www.extremenetworks.com/resources/blogs/wireless-security-in-a-6-ghz-wi-fi-6e-world#:~:text=The%20Wi%2DFi%20Alliance%20requires,(OWE)%20in%206%20GHz.
upvoted 2 times
zbeugene7
9 months, 1 week ago
Not supported doesn't mean it's not compatible, CISCO states there is no support, however it's the best option listed that would work with .1X
upvoted 1 times
zbeugene7
1 month, 2 weeks ago
I am going to recant, after digging, I founbd that no legacy security standards can be used with WI-FI 6, WEP, WPA, WPA2 ruled out , this is a typical CISCO trap: there should be WPA3 in the list but it's not, the only one supported 802.1x, this leaves "open" the onle other option
upvoted 2 times
...
...
Reavr
1 year, 1 month ago
This link is wifi 6E, not wifi 6. The are two different things. I can't believe the wifi committee did something great by renaming our wifis by generation instead of protocol (b, g, n, ac, and etc) but then mess it up immediately by coming up with 6E, why not name it 7?
upvoted 1 times
...
...
mrlyfi
1 year, 11 months ago
The correct answer is B and C ( 802.1X and Open) !
upvoted 2 times
...
teikitiz
2 years, 1 month ago
WPA 2 is supported on WiFi 6. It is not supported on WiFi6E (on 6GHz band; it is supposed to be "legacy free")
upvoted 1 times
...
uhljeb
2 years, 3 months ago
B and C
upvoted 4 times
...
uhljeb
2 years, 3 months ago
WPA2 is not supported on WI-FI6, and WEP is out of the discussion, so the correct answers are 802.1x and OPEN.
upvoted 5 times
...
jaz600
2 years, 4 months ago
Selected Answer: BC
B&C WPA2 is not supported on wifi6
upvoted 5 times
...
HungarianDish_111
2 years, 4 months ago
Is this about wifi 6E? Do they mean OWE or Open SSID? Anyway, WPA2 seems to be out of support on wifi 6/6E. 802.1x and Open (OWE?) seem to be working. Could someone check this please? A couple of good sources: https://www.cisco.com/c/en/us/products/collateral/wireless/nb-06-preparing-for-wifi-6-ebook-cte-en.html "WPA3 is a mandatory requirement for the Wi-Fi 6E network" https://blogs.cisco.com/networking/wlan-ssid-security-migration-into-6ghz-networks "any new device supporting 6GHz, will be required to “only” support the following security standards while in the new band: WPA3..., OWE..., SAE..." https://www.cisco.com/c/en/us/products/wireless/what-is-wifi-6-vs-wifi-6e.html#~benefits "Wi-Fi Protected Access 3 (WPA3) mandatory for all Wi-Fi 6E devices, without backward compatibility for WPA2"
upvoted 2 times
...
x3rox
2 years, 5 months ago
Similar question on older exam when referring ro 802.11ac - the answer was OPEN: https://www.examtopics.com/discussions/cisco/view/5831-exam-200-355-topic-1-question-36-discussion/
upvoted 1 times
...
x3rox
2 years, 5 months ago
When Cisco is describing Wi-fi 6, they state this about OPEN: Wifi6…It offers enhanced security for open Wi-Fi networks with encryption of unauthenticated traffic, robust password protection against brute-force dictionary attacks, and superior data reliability for sensitive information with 192-bit encryption. Also, they state this about 802.1X, in the context of wifi6: Cisco Network Essentials and Network Advantage licenses enable wireless fundamentals such as 802.1X authentication, QoS, Plug and Play (PnP), telemetry and visibility, Single Sign-On (SSO), and security controls. These licenses are perpetual. Source: https://www.cisco.com/c/en/us/products/collateral/wireless/nb-06-preparing-for-wifi-6-ebook-cte-en.html
upvoted 2 times
x3rox
2 years, 5 months ago
More on 802.1X: Supported WPA3 modes [….] WPA3-Enterprise, for 802.1X security networks. This leverages IEEE 802.1X with SHA-256 as the Authentication and Key Management (AKM). […] while the WPA2-capable clients can use WPA2-Enterprise’s 802.1X SHA1 or 802.1X-SHA256 Note: This mode should be used only when necessary. For maximum security, the recommended mode is to use only WPA3 and not a mix of WPA3 and WPA2. Source: https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/wpa3-dep-guide-og.html WPA2(AES) is not a wifi6 Security Enhancement, which is the question concern. - wifi6 enhancement. Looks to me the BC we would be a better choice. What do you think?
upvoted 2 times
x3rox
2 years, 5 months ago
Chapter: Configuring Layer2 Security: The available Layer 2 security policies are as follows: None (open WLAN) Static WEP or 802.1X source: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01010000.html
upvoted 3 times
...
x3rox
2 years, 5 months ago
Moreover: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_01010000.html
upvoted 1 times
x3rox
2 years, 5 months ago
The default security setting for new WLANs is 802.1X with dynamic keys enabled. To maintain robust Layer 2 security, leave 802.1X configured on your WLANs.
upvoted 1 times
...
...
...
...
eff3
2 years, 6 months ago
Selected Answer: AB
I think the question is confusing.. They want you to use .1x (instead of a PSK) with! wpa2. Open is not a standard that is discussed
upvoted 4 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel