ExamGecko
Question list
Search
Search

Related questions











Question 105 - HPE7-A01 discussion

Report
Export

Refer to Exhibit:

A company has deployed 200 AP-635 access points. To take advantage of the 6 GHz band, the administrator has attempted to configure a new WPA3-OWE SSID in Central but is not working as expected.

What would be the correct action to fix the issue?

A.
Change the SSID to WPA3-Enterprise (CNSA).
Answers
A.
Change the SSID to WPA3-Enterprise (CNSA).
B.
Change the SSID to WPA3-Personal.
Answers
B.
Change the SSID to WPA3-Personal.
C.
Change the SSID to WPA3-Enhanced Open.
Answers
C.
Change the SSID to WPA3-Enhanced Open.
D.
Change the SSID to WPA3-Enterprise (CCM).
Answers
D.
Change the SSID to WPA3-Enterprise (CCM).
Suggested answer: C

Explanation:

The correct action to fix the issue is C. Change the SSID to WPA3-Enhanced Open.

WPA3-OWE is not a valid SSID type in Central. OWE stands for Opportunistic Wireless Encryption, and it is a feature that provides encryption for open networks without requiring authentication. OWE is also known as Enhanced Open, and it is one of the options for WPA3 SSIDs in Central1.

According to the Aruba document Configuring WLAN Settings for an SSID Profile, one of the steps to configure a WPA3 SSID is:

Select the Security Level from the drop-down list. The following options are available:

WPA3-Personal: This option uses Simultaneous Authentication of Equals (SAE) to provide stronger password-based authentication and key exchange than WPA2-Personal.

WPA3-Enterprise: This option uses 192-bit cryptographic strength for authentication and encryption, as defined by the Commercial National Security Algorithm (CNSA) suite.

WPA3-Enterprise (CCM): This option uses 128-bit cryptographic strength for authentication and encryption, as defined by the Counter with CBC-MAC (CCM) mode.

WPA3-Enhanced Open: This option uses Opportunistic Wireless Encryption (OWE) to provide encryption for open networks without requiring authentication.

The other options are incorrect because:

A) WPA3-Enterprise (CNSA) is a valid SSID type, but it requires 802.1X authentication with a RADIUS server, which may not be suitable for the company's use case.

B) WPA3-Personal is a valid SSID type, but it requires a passphrase to join the network, which may not be suitable for the company's use case.

D) WPA3-Enterprise (CCM) is a valid SSID type, but it requires 802.1X authentication with a RADIUS server, which may not be suitable for the company's use case.

asked 16/09/2024
Houshang Ardekani
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first