CompTIA CASP+ Practice Test

What is the most secure method of integrating non-compliant wireless clients into a network requiring WPA2?

1. Create a separate SSID and WEP key on a new network segment

2. Allow non-compliant clients access to the main SSID

3. Use MAC address filtering for non-compliant clients

4. Disable WPA2 for non-compliant clients temporarily

The correct answer is: Create a separate SSID and WEP key on a new network segment

Creating a separate SSID and WEP key on a new network segment is considered the most secure method for integrating non-compliant wireless clients into a network requiring WPA2. This approach effectively isolates non-compliant devices from the main network, which enhances security by minimizing potential vulnerabilities that those devices may introduce. By segregating the network traffic, you can apply stricter security policies to the main network while allowing more lenient access for the non-compliant clients. Even though WEP is no longer considered secure, in this scenario, it serves as a temporary measure that limits the exposure of the main network, which is safeguarded by WPA2. Other methods, such as allowing non-compliant clients access to the main SSID, utilize weak security measures, such as MAC address filtering, or even temporarily disabling WPA2, compromise the overall security of the network. Any of these alternatives could expose critical resources and data to unnecessary risks stemming from the vulnerabilities associated with non-compliant devices.