A city compares CCMP and TKIP on a dual-mode park AP that still serves modern clients. Which cipher preference should the assessor recommend when interoperability allows?
Select an answer to reveal the explanation.
Short Explanation
TKIP was the spare tire after WEP blew out; CCMP/AES is the real wheel. If every city laptop can roll on CCMP, take TKIP off the axle. Dual-mode nostalgia just keeps a weaker tool in the toolbox.
Full Explanation
CCMP with AES is the intended robust cipher suite for WPA2 data protection, while TKIP was a transitional design with known limitations. When client inventories support CCMP-only profiles, operators should disable TKIP advertisements to raise the BSS baseline. Assessors flag dual-mode TKIP retention as unnecessary residual risk on modern municipal deployments.