Public-works still has a few WPA2-only rugged tablets while newer crew phones support WPA3. Leadership enables WPA3 Transition Mode on the field SSID. What security tradeoff should the CWSP candidate emphasize versus SAE-only?
Select an answer to reveal the explanation.
Short Explanation
Transition Mode is the “both kinds of locks on the door” setting—old tablets still get in, but that means the weaker WPA2-PSK story can still haunt you. SAE-only is the clean break once the museum pieces retire.
Full Explanation
WPA3 Transition Mode allows mixed WPA2/WPA3 client populations during migration but leaves residual risk from still-permitted WPA2-Personal/PSK behaviors until the SSID can be locked to SAE-only (or stronger Enterprise suites). It does not instantly remove all WPA2 AKM, introduce WEP for management frames, or convert Enterprise SSIDs to a global PSK. Candidates should treat Transition Mode as a temporary compatibility posture and plan the cutover to SAE-only or full WPA3 Enterprise suites once legacy devices are retired.