SIMULATION
-
A newly purchased corporate WAP needs to be configured in the MOST secure manner possible.
INSTRUSTIONS
-
Please click on the below items on the network diagram and configure them accordingly:
• WAP
• DHCP Server
• AAA Server
• Wireless Controller
• LDAP Server
If at any time you would like to bring back the initial state of the simulation, please dick the Reset All button.
From the SYO-501 link provided by DashRyde, this is what someone posted: Should it be MIXED (I am not sure about this. But going with MIXED that supports both B and G) Channel 11 Disabled WPA2 Enterprise (as it is using Radius for authentication?)
Why change to 11
non-overlapping channel. 1,6,11... See Net+
WPA2 (Wi-Fi Protected Access 2) Enterprise requires more robust security mechanisms and features that are not supported by the older 802.11b standard. Therefore you can't choose MIXED and WPA2 Enterprise, you must choose 802.11g which supports the necessary encryption and authentication mechanisms to implement WPA2-Enterprise securely.
so I guess: G only better than B only and faster and not easily obstructed CH: 11 SSID: Disable WAP2 Enterprise as its more secure than RADIUS. the rest is just for information and to lead us astray..
Let me share my humble opinion... With this "Network Diagram" all servers and WiFi controller are in different networks and not able to reach each other. So the only setup left is : Wireless Network Mode - Mixed (No security implications and no information to decide) Wireless Network Name (SSID) - DEFAULT Wireless Channel - Any channel is proper (No security impact -probability for ch.11to be free is higher ) SSID Broadcast - disable (gives false security feeling but reduces number of people that will try to connect by mistake.) Security Mode - WPA2 PSK (Higher security mode available with this infrastructure setup) Please correct me if I am wrong!
WPA2 Enterprise as it connects to a radius server.
what Canbab thinking? Routing exists dont know how well it done. The one device might be a router/firewall. Might need those policies. The question is not centered on that. WPA-2 Ent
is that an even objective of the exam? I mean how can I tell the number of channels to use? and WTH is wireless network mode it's not even mentioned in the book, the only thing that am sure to use is WPA2 Enterprise
Nevermind this question was mentioned previously in old SY0-501 : https://www.examtopics.com/discussions/comptia/view/52984-exam-sy0-501-topic-1-question-563-discussion/
This is a CompTIA A+ question. You should already be certified in this to be able to take Security+ exam.
Basic Wireless Settings: Wireless Network Mode: G Only -Higher through put capability -5.0 ghz -This is the option with the most security Wireless Network Name(SSID): Default On the exam, if we have the option to change this, I would lean towards changing it because it would make it more secure to change it from default. Wireless Channel: 9 Based on the information given, 9 is going to be the option least used. 1-6 would be default and most people would gravitate to 1-6. Wireless SSID Broadcast: Disable Because that way you're less likely to have someone insert a rogue access point Security Mode: WPA2 Enterprise It connects back to the RADIUS server. This helps verify that you are who you say you are. Someone would have to have your credential information in order to log onto that wifi
You do not know how wifi channeling works. The best options are 1 6 11 as those have no overlap between each other. Using any other channel with 1 6 11 or their neighbors will cause overlap.
802.11g and b which I assume is what they're getting to here - doesn't support WPA2. Only WPA, WEP and Radius. My bet would be Network Mode: G Channel: 11 Broadcast: Disable Security Mode: Radius
G wirelessnet 1 Disable WPA2 Enterprise AES 192.168.1.20 1812 corporatenet
Wireless Network Mode - Mixed Wireless Channel - 11 Security Mode - WPA2 Enterprise
https://www.linksys.com/support-article?articleNum=137534#:~:text=If%20you%20have%20multiple%20devices,specific%20wireless%20standard%20as%20well.
why does that look like a link not to be clicked