An auditor asks why the city’s staff SSID uses CCMP instead of TKIP. What is the best explanation?
Select an answer to reveal the explanation.
Short Explanation
TKIP was the emergency spare tire after WEP blew out—fine to limp home, not what you mount for the next decade. CCMP (AES) is the proper wheel; that is why city staff SSIDs left TKIP behind.
Full Explanation
TKIP improved on WEP temporarily but retained design limits and is deprecated. AES-CCMP became the standard robust security network cipher, with GCMP used in later high-throughput contexts. Auditors should hear that the city migrated from interim TKIP-era crypto to AES-based protection.