Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?
A) The MSK is generated from the 802.1X/EAP authentication. The PMK is derived from the MSK. The PTK is derived from the PMK, and the keys used for actual data encryption are a part of the PTK.
B) If passphrase-based client authentication is used by the EAP type, the PMK is mapped directly from the user's passphrase. The PMK is then used during the 4-way handshake to create data encryption keys.
C) After successful EAP authentication, the RADIUS server generates a PMK. A separate key, the MSK, is derived from the AAA key and is hashed with the PMK to create the PTK and GTK.
D) The PMK is generated from a successful mutual EAP authentication. When mutual authentication is not used, an MSK is created. Either of these two keys may be used to derive the temporal data encryption keys during the 4-way handshake.

CWNP CWSP-207 Exam - Topic 4 Question 41 Discussion

Actual exam question for CWNP's CWSP-207 exam
Question #: 41
Topic #: 4
[All CWSP-207 Questions]

Which one of the following describes the correct hierarchy of 802.1X authentication key derivation?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Yvonne at May 11, 2026, 04:50 PM

Limited Time Offer

25%

Off

Get Premium CWSP-207 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Tomas
3 days ago
A) is the correct order for 802.1X key derivation.
upvoted 0 times
...
Gilberto
8 days ago
C) sounds complicated, but I think it's accurate.
upvoted 0 times
...
Hannah
13 days ago
B) is misleading, PMK isn't just from the passphrase.
upvoted 0 times
...
Ashlee
18 days ago
Wait, is it really that straightforward?
upvoted 0 times
...
Kallie
24 days ago
Totally agree, A) makes the most sense!
upvoted 0 times
...
Fernanda
29 days ago
A) is the correct order for 802.1X key derivation.
upvoted 0 times
...
Galen
1 month ago
I’m leaning towards option D because it mentions mutual authentication, which seems crucial, but I’m not confident about the specifics of the 4-way handshake.
upvoted 0 times
...
Mariann
1 month ago
I feel like the PMK is generated after mutual authentication, but I’m confused about how the MSK comes into play in that process.
upvoted 0 times
...
Laila
1 month ago
I remember practicing a question similar to this, and I think option A sounds familiar, but I can't recall the exact order of key derivation.
upvoted 0 times
...
Amie
3 months ago
I think the hierarchy starts with the MSK from the EAP, but I'm not entirely sure how the PMK fits in.
upvoted 0 times
...

Save Cancel