Examkin

Question

Difficulty: EasyWireless Security Protocols (WPA, WPA2, WPA3)

A network administrator is upgrading a wireless network from WPA2-Personal to WPA3-Personal to increase client authentication security. Which key exchange protocol does WPA3-Personal introduce to protect against offline dictionary attacks?

  1. Simultaneous Authentication of Equals (SAE)Answer
  2. B
    Temporal Key Integrity Protocol (TKIP)
  3. C
    Remote Authentication Dial-In User Service (RADIUS)
  4. D
    Pre-Shared Key (PSK) with 4-Way Handshake

Answer

Simultaneous Authentication of Equals (SAE)
Simultaneous Authentication of Equals (SAE) is the core key exchange protocol introduced in WPA3-Personal. Based on the Dragonfly handshake, SAE establishes a secure key exchange that prevents attackers from capturing handshakes over the air to perform offline dictionary attacks.

Step-by-Step Solution

1
Identify the authentication mechanism change between WPA2-Personal and WPA3-Personal.
WPA2-Personal uses a Pre-Shared Key (PSK) with a 4-Way Handshake, whereas WPA3-Personal upgrades to Simultaneous Authentication of Equals (SAE).
WPA3 mandates higher security standards to prevent offline password guessing attacks.
2
Analyze how SAE protects client authentication.
SAE provides a secure password-authenticated key exchange (based on the Dragonfly handshake) ensuring forward secrecy and resistance to passive capture/dictionary attacks.
Even if an attacker captures the wireless handshake, SAE prevents them from determining the pre-shared key offline.

Key Concept

WPA3-Personal Key Exchange (SAE vs PSK)
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic