Question

Difficulty: MediumWireless Security Protocols (WPA, WPA2, WPA3)

Match each wireless security framework or protocol with its primary key exchange or encryption mechanism.

  • WPA3-PersonalUses Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks.
  • WPA2-EnterpriseRequires 802.1X port-based authentication and RADIUS for centralized dynamic key derivation.
  • Enhanced Open (OWE)Provides unauthenticated unicast data encryption on open networks using Diffie-Hellman key exchange.
  • WPA-Personal (Legacy)Relies on TKIP encryption with RC4 cipher and a pre-shared key, which is deprecated.

Answer

WPA3-Personal matches with SAE key exchange. WPA2-Enterprise matches with 802.1X/RADIUS authentication. Enhanced Open (OWE) matches with unauthenticated Diffie-Hellman encryption. WPA-Personal matches with deprecated TKIP/RC4 encryption.
Each wireless protocol maps to its distinct standard implementation: WPA3-Personal uses SAE for Dragonfly key exchange, WPA2-Enterprise mandates 802.1X/EAP with RADIUS, Enhanced Open provides OWE encryption for unauthenticated networks, and legacy WPA uses TKIP.

Step-by-Step Solution

1
Identify key characteristics of WPA3-Personal.
WPA3-Personal introduces SAE (Simultaneous Authentication of Equals) to eliminate offline brute-force attacks.
SAE is the hallmark replacement for PSK in WPA3.
2
Identify key characteristics of WPA2-Enterprise.
Enterprise modes specifically demand 802.1X with EAP and RADIUS servers.
Personal modes use pre-shared keys, whereas Enterprise modes use centralized AAA architecture.
3
Identify key characteristics of Enhanced Open (OWE).
Enhanced Open uses OWE (Diffie-Hellman key exchange) to encrypt traffic on open networks without password entry.
OWE protects public Wi-Fi eavesdropping without authentication.
4
Identify key characteristics of WPA-Personal (Legacy).
Legacy WPA relied on TKIP/RC4 prior to the introduction of CCMP/AES in WPA2.
TKIP was designed as an interim migration path from WEP.

Key Concept

Wireless Security Protocols and Authentication/Encryption Mechanisms
Rate this question