Examkin

Question

Difficulty: HardWireless Security Protocols (WPA, WPA2, WPA3)

Match each wireless security deployment mode or protocol with its primary cryptographic cipher suite or key exchange mechanism.

  • WPA3-PersonalSimultaneous Authentication of Equals (SAE) using the Dragonfly handshake
  • Standard WPA2-EnterpriseAES-CCMP-128 encryption paired with 802.1X/EAP authentication
  • WPA3-Enterprise 192-bit Mode256-bit AES-GCMP encryption with HMAC-SHA384 key derivation
  • Enhanced Open (OWE)Unauthenticated Diffie-Hellman key exchange providing opportunistic encryption

Answer

WPA3-Personal matches Simultaneous Authentication of Equals (SAE) using the Dragonfly handshake; Standard WPA2-Enterprise matches AES-CCMP-128 encryption paired with 802.1X/EAP authentication; WPA3-Enterprise 192-bit Mode matches 256-bit AES-GCMP encryption with HMAC-SHA384 key derivation; Enhanced Open (OWE) matches Unauthenticated Diffie-Hellman key exchange providing opportunistic encryption.
Each wireless protocol suite uses distinct cryptographic mechanisms: WPA3-Personal relies on SAE (Dragonfly key exchange) to prevent offline brute-force attacks; standard WPA2-Enterprise uses 802.1X/EAP with AES-CCMP-128 encryption; WPA3-Enterprise 192-bit mode upgrades encryption to 256-bit AES-GCMP and HMAC-SHA384; and Enhanced Open employs OWE with unauthenticated Diffie-Hellman key exchange for open Wi-Fi protection.

Step-by-Step Solution

1
Analyze WPA3-Personal key management requirements
Identify that WPA3-Personal mandates SAE (Simultaneous Authentication of Equals), replacing static PSK to protect against offline passphrase cracking.
SAE performs a forward-secret Dragonfly handshake during initial association.
2
Analyze standard WPA2-Enterprise default specifications
Identify that WPA2-Enterprise standard deployments use 802.1X with EAP methods for identity verification combined with AES-CCMP-128 for symmetric payload encryption.
AES-CCMP-128 is the default mandatory cipher suite defined in the IEEE 802.11i standard for WPA2.
3
Evaluate high-security WPA3 Enterprise requirements
Identify that WPA3-Enterprise 192-bit security mode specifies 256-bit AES Galois/Counter Mode (GCMP-256) and HMAC-SHA384 key derivation.
The 192-bit security profile aligns with Commercial National Security Algorithm (CNSA) suite standards.
4
Examine open wireless network encryption standards
Identify that Enhanced Open utilizes RFC 8110 Opportunistic Wireless Encryption (OWE) via an unauthenticated Diffie-Hellman key exchange.
OWE delivers pairwise encryption on guest or open SSIDs without requiring password authentication.

Key Concept

Wireless security standards (WPA2, WPA3, OWE) and their respective authentication, key exchange, and cipher mechanisms.
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic