The question requires a WLAN configuration that supports two specific features: 802.11r and the use of a passphrase for authentication. The IEEE 802.11r standard is also known as Fast BSS Transition (FT), or simply "Fast Transition." A "passphrase" is characteristic of Pre-Shared Key (PSK) authentication, commonly used in WPA2/WPA3-Personal security policies. To meet both requirements, the engineer must enable the Fast Transition feature on the WLAN and configure the security policy to use the specific Authentication and Key Management (AKM) suite known as FT-PSK. This combination allows for fast roaming between access points while using a shared key for authentication.

A. 802.1X and SUITEB-1X: 802.1X is an authentication framework that uses individual user credentials (e.g., username/password or certificates), not a shared passphrase.

C. 802.1X and Fast Transition: This option is incorrect because 802.1X authentication does not use a passphrase, which is a specific requirement of the question.

D. FT PSK and SUITEB-1X: SUITEB-1X is a high-security cryptographic suite designed for use with 802.1X authentication, not with PSK-based methods.

1. Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide

IOS XE Amsterdam 17.3.x - Security Configuration Guide

Chapter: Configuring Security. This guide details the WLAN security policy configuration. In the section for configuring WPA2

it specifies the options for Authentication Key Management (AKM)

which include "FT-PSK" for Fast Transition with a Pre-Shared Key. It states

"For WPA2 Policy

you can enable... Fast Transition (802.11r)... For AKM

you can choose PSK... When Fast Transition is enabled with PSK

this is FT-PSK."

2. IEEE Std 802.11™-2020

IEEE Standard for Information Technology—Telecommunications and information exchange between systems Local and metropolitan area networks—Specific requirements - Part 11: Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specifications. - Section 12.4.2.3

"AKM suite selector definitions". Table 12-6 defines the AKM suite selectors. The suite "FT authentication and key management with PSK" is explicitly defined with the selector value 00-0F-AC:3

confirming that FT-PSK is a standardized method.

3. Cisco Wireless Controller Configuration Guide

Release 8.5 - Chapter: Configuring Security Solutions

Section: Configuring Fast Transition. This document explains

"Fast Transition can be configured for WPA2-Enterprise (802.1X) or WPA2-Personal (PSK) security policies." This directly confirms that Fast Transition (802.11r) can be combined with PSK (passphrase).