Refer to the exhibit.
A customer is having problems with clients associating to the wireless network. Based on the configuration, which option describes the most likely cause of the issue?
A. Both AES and TKIP must be enabled.
B. SA Query Timeout is set too low.
C. Comeback timer is set too low.
D. PMF is set to “required”.
E. MAC Filtering must be enabled.
D is correct.
If the client doesn’t support PMF (802.11w) he can’t connect
Lets break this down:
A. Both AES and TKIP must be enabled. – WRONG, TKIP is considered vulnerable and nobody would enable this worth their salt. Cisco would also be shot if they reccomended it.
B. SA Query Timeout is set too low. – This is fine and its a default
C. Comeback timer is set too low. – This is fine and its a default
D. PMF is set to “required”. – The only logical answer left, if PMF was required and the client did not support it they wouldnt be able to join.
E. MAC Filtering must be enabled. – Why, this has nothing to do with this, the question doesnt give any hint we are looking at MAC based security so we can rule this out.
Agree, ‘Required’ specifies that a client which does not support 802.11w is not allowed to connect. Optional specifies that even clients that do not support 802.11w is allowed to connect.
it seems to me that the correct answer is : “D”
Agree with this.
E (mac filtering must be enabled) has nothing to do.