CCNA Plan

CCNA practice question: Security Fundamentals

Security FundamentalsDifficulty 2/5

Which wireless security protocol introduced Simultaneous Authentication of Equals (SAE) to replace the PSK four-way handshake's weakness?

  1. AWPA
  2. BWPA2
  3. CWPA3
  4. DWEP
Show answer and rationale

Correct: C. WPA3-Personal uses SAE (a Dragonfly key exchange) so an offline dictionary attack on a captured handshake no longer works. WPA2-Personal uses PSK with the four-way handshake.

  • D — WEP uses RC4 with static keys and is broken.
  • A — WPA introduced TKIP as an interim fix.
  • B — WPA2 uses AES-CCMP with PSK/802.1X but not SAE.

Concept being tested

Threats and mitigation, device access control, password policy, IPsec/VPN concepts, ACLs, Layer 2 security (DHCP snooping, DAI, port security), AAA, wireless security and WPA2/WPA3. — 15% of the exam. Study guide for Security Fundamentals.

Related questions

Practice this topic

Blueprint-mapped questions with full rationales for every choice.

Start practice

Primary references

  1. CCNA Exam v1.1 (200-301) Exam Topics — Cisco Systems · primary · retrieved 2026-09-21, verified 2026-09-21
Draft — pending editorial reviewHow we verify facts