Examkin

Question

Difficulty: HardWireless Security Protocols (WPA, WPA2, WPA3)

A network engineer is configuring a high-security wireless LAN on a Cisco Wireless LAN Controller (WLC) that must strictly comply with WPA3-Enterprise 192-bit mode requirements. Which cryptographic suite and management security setting must be enabled on the WLC profile to meet this standard?

  1. GCMP-256 encryption, EAP-TLS authentication with SHA-384, and mandatory Protected Management Frames (PMF)Answer
  2. B
    CCMP-128 encryption, Simultaneous Authentication of Equals (SAE), and optional Protected Management Frames (PMF)
  3. C
    TKIP encryption, 802.1X with PEAP-MSCHAPv2 authentication, and disabled Protected Management Frames (PMF)
  4. D
    GCMP-128 encryption, Pre-Shared Key (PSK) authentication, and mandatory Protected Management Frames (PMF)

Answer

GCMP-256 encryption, EAP-TLS authentication with SHA-384, and mandatory Protected Management Frames (PMF)
WPA3-Enterprise 192-bit mode mandates the 256-bit Galois/Counter Mode Protocol (GCMP-256) for wireless frame encryption, EAP-TLS with HMAC-SHA384 for robust key derivation and authentication, and mandatory Protected Management Frames (PMF / IEEE 802.11w) to prevent unicast/multicast management frame spoofing.

Step-by-Step Solution

1
Identify the target wireless security operational mode specified in the scenario
The scenario requires configuration of WPA3-Enterprise 192-bit mode (aligned with the Commercial National Security Algorithm / CNSA suite).
WPA3 defines distinct baseline specifications for WPA3-Personal, standard WPA3-Enterprise (128-bit), and WPA3-Enterprise 192-bit mode.
2
Determine the cryptographic ciphers, key management methods, and frame protection rules for 192-bit mode
WPA3-Enterprise 192-bit mode requires GCMP-256 for data confidentiality, EAP-TLS using SHA-384 for key derivation and authentication, and mandatory Protected Management Frames (PMF / IEEE 802.11w).
Standard 128-bit WPA3-Enterprise allows CCMP-128 or GCMP-128, whereas 192-bit mode enforces higher-grade cryptographic algorithms.
3
Evaluate the choices to select the option that contains all mandatory 192-bit mode specifications
The correct selection is the option combining GCMP-256, EAP-TLS with SHA-384, and mandatory PMF.
All other options mix in WPA3-Personal components (SAE), use 128-bit or legacy ciphers (CCMP-128, TKIP), use PSK, or misstate PMF requirements as optional or disabled.

Key Concept

WPA3-Enterprise 192-bit Mode Requirements
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic