An administrator is creating a WLAN named CORP-WIFI in the controller GUI for staff laptops. The network has no authentication server, must encrypt traffic with the strongest cipher WPA2 supports, and staff will authenticate with a shared passphrase. Which combination of Layer 2 security settings should be selected in the GUI?
- ALayer 2 security WPA+WPA2 with the WPA2 policy and TKIP cipher enabled, and the authentication key management set to PSK.
- BLayer 2 security WPA+WPA2 with the WPA2 policy and AES (CCMP) ciphers enabled, and the authentication key management set to PSK. Correct
- CLayer 2 security WPA+WPA2 with AES (CCMP) enabled and the authentication key management set to 802.1X.
- DLayer 2 security None with a WPA2 pre-shared key entered in the advanced web policy fields for the passphrase.
Why A is wrong: TKIP is the weaker legacy cipher retained for compatibility, so choosing it does not meet the requirement for the strongest WPA2 encryption.
Why B is correct: WPA2 with AES-CCMP is the strongest WPA2 cipher, and selecting PSK as the key management lets staff authenticate with a shared passphrase without a RADIUS server.
Why C is wrong: The cipher is correct, but 802.1X key management requires a RADIUS authentication server, which the scenario explicitly does not provide.
Why D is wrong: Selecting None disables Layer 2 encryption entirely, and a WPA2 passphrase cannot be applied through a web policy field, so traffic would be unencrypted.