[&] What is a potential security risk associated with WPA transition mode?
- It exposes WPA2 clients to WPA3 specific vulnerabilities
- It allows WPA3 clients to connect without encryption
- It creates conflicts between different wireless channels
- It can lead to downgrade attacks where WPA3 clients connect as WPA2

[&] Why can't GCMP 128 be used in a WPA transition mode network?
- Because WPA2 clients do not support GCMP 128
- Because it is incompatible with pre-shared keys
- Because it reduces network throughput
- Because it requires special hardware not available in all access points

[&] What happens if the 'transition disable' flag is set in a WPA transition mode network?
- It allows WPA2 clients to upgrade to WPA3 automatically
- WPA3 clients can no longer fall back to WPA2 once connected
- Both WPA2 and WPA3 clients are forced to reconnect periodically
- It prevents WPA2 clients from connecting to the network

[&] Why should protected management frames be set to 'optional' in WPA transition mode?
- Because it is the default configuration in all wireless controllers
- To increase the security level of WPA2 clients
- To ensure WPA2 clients can still connect if they do not support PMF
- Because WPA3 clients do not use protected management frames

[&] What is the main purpose of WPA transition mode?
- To enable backwards compatibility between WEP and WPA clients
- To facilitate interoperability between WPA2 and WPA3 clients
- To enforce the use of WPA3 exclusively
- To enhance encryption strength of WPA2 clients

[&] What is a necessary configuration on the WLC to allow WPA3 clients to connect in a transition mode network?
- Enabling beacon protection for all clients
- Selecting both pre-shared key and SAE in authentication settings
- Use of WEP encryption
- Protected management frames set to required