Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 725 discussion

Actual exam question from CompTIA's SY0-601

Question #: 725
Topic #: 1

SIMULATION
-

A newly purchased corporate WAP needs to be configured in the MOST secure manner possible.

INSTRUSTIONS
-

Please click on the below items on the network diagram and configure them accordingly:

• WAP
• DHCP Server
• AAA Server
• Wireless Controller
• LDAP Server

If at any time you would like to bring back the initial state of the simulation, please dick the Reset All button.

Show Suggested Answer

Suggested Answer:

by DashRyde at Oct. 17, 2023, 11:59 a.m.

Comments

Submit Cancel

Soleandheel

Highly Voted 1 year, 7 months ago

From the SYO-501 link provided by DashRyde, this is what someone posted: Should it be MIXED (I am not sure about this. But going with MIXED that supports both B and G) Channel 11 Disabled WPA2 Enterprise (as it is using Radius for authentication?)

upvoted 14 times

agfencer

12 months ago

WPA2 (Wi-Fi Protected Access 2) Enterprise requires more robust security mechanisms and features that are not supported by the older 802.11b standard. Therefore you can't choose MIXED and WPA2 Enterprise, you must choose 802.11g which supports the necessary encryption and authentication mechanisms to implement WPA2-Enterprise securely.

upvoted 2 times

Feeter

11 months ago

You can configure a mixed wireless network mode with WPA2 Enterprise on channel 11. Mixed supports older and newer standards.

upvoted 2 times

...

Hellome123

1 year ago

Why change to 11

upvoted 1 times

Alcpt

8 months, 1 week ago

you can use 1,6, or 11.

upvoted 1 times

...

ecohenrose

1 year ago

non-overlapping channel. 1,6,11... See Net+

upvoted 2 times

...

ComPCertOn

Highly Voted 1 year, 7 months ago

so I guess: G only better than B only and faster and not easily obstructed CH: 11 SSID: Disable WAP2 Enterprise as its more secure than RADIUS. the rest is just for information and to lead us astray..

upvoted 8 times

...

LanTheMan

Most Recent 1 year ago

802.11g and b which I assume is what they're getting to here - doesn't support WPA2. Only WPA, WEP and Radius. My bet would be Network Mode: G Channel: 11 Broadcast: Disable Security Mode: Radius

upvoted 1 times

...

Hellome123

1 year ago

G wirelessnet 1 Disable WPA2 Enterprise AES 192.168.1.20 1812 corporatenet

upvoted 1 times

...

ID77

1 year, 3 months ago

Wireless Network Mode - Mixed Wireless Channel - 11 Security Mode - WPA2 Enterprise

upvoted 2 times

...

7308365

1 year, 4 months ago

Basic Wireless Settings: Wireless Network Mode: G Only -Higher through put capability -5.0 ghz -This is the option with the most security Wireless Network Name(SSID): Default On the exam, if we have the option to change this, I would lean towards changing it because it would make it more secure to change it from default. Wireless Channel: 9 Based on the information given, 9 is going to be the option least used. 1-6 would be default and most people would gravitate to 1-6. Wireless SSID Broadcast: Disable Because that way you're less likely to have someone insert a rogue access point Security Mode: WPA2 Enterprise It connects back to the RADIUS server. This helps verify that you are who you say you are. Someone would have to have your credential information in order to log onto that wifi

upvoted 2 times

kewokil120

1 year, 4 months ago

You do not know how wifi channeling works. The best options are 1 6 11 as those have no overlap between each other. Using any other channel with 1 6 11 or their neighbors will cause overlap.

upvoted 6 times

...

ThaKyd88

1 year, 6 months ago

https://www.linksys.com/support-article?articleNum=137534#:~:text=If%20you%20have%20multiple%20devices,specific%20wireless%20standard%20as%20well.

upvoted 1 times

kelubia

1 year, 5 months ago

why does that look like a link not to be clicked

upvoted 17 times

...

CanBaB

1 year, 7 months ago

Let me share my humble opinion... With this "Network Diagram" all servers and WiFi controller are in different networks and not able to reach each other. So the only setup left is : Wireless Network Mode - Mixed (No security implications and no information to decide) Wireless Network Name (SSID) - DEFAULT Wireless Channel - Any channel is proper (No security impact -probability for ch.11to be free is higher ) SSID Broadcast - disable (gives false security feeling but reduces number of people that will try to connect by mistake.) Security Mode - WPA2 PSK (Higher security mode available with this infrastructure setup) Please correct me if I am wrong!

upvoted 6 times

JasonMunoz

11 months ago

WPA2 PSK should never be used in that type of environment.

upvoted 1 times

...

klinkklonk

1 year, 4 months ago

WPA2 Enterprise as it connects to a radius server.

upvoted 9 times

kewokil120

1 year, 4 months ago

what Canbab thinking? Routing exists dont know how well it done. The one device might be a router/firewall. Might need those policies. The question is not centered on that. WPA-2 Ent

upvoted 1 times

...

DashRyde

1 year, 8 months ago

is that an even objective of the exam? I mean how can I tell the number of channels to use? and WTH is wireless network mode it's not even mentioned in the book, the only thing that am sure to use is WPA2 Enterprise

upvoted 6 times

Paula77

1 year, 3 months ago

This is a CompTIA A+ question. You should already be certified in this to be able to take Security+ exam.

upvoted 3 times

...

DashRyde

1 year, 8 months ago

Nevermind this question was mentioned previously in old SY0-501 : https://www.examtopics.com/discussions/comptia/view/52984-exam-sy0-501-topic-1-question-563-discussion/

upvoted 4 times

...