Question

Difficulty: EasyWireless Security Protocols (WPA, WPA2, WPA3)

An network administrator is updating an enterprise wireless network configuration to implement WPA3-Personal. Which two enhancements does WPA3 provide over WPA2 to improve wireless connection security? (Select two)

  1. Simultaneous Authentication of Equals (SAE) to defend against offline dictionary attacksAnswer
  2. Mandatory Protected Management Frames (PMF) to protect management traffic against eavesdropping and forgingAnswer
  3. C
    Temporal Key Integrity Protocol (TKIP) for backward-compatible dynamic key generation
  4. D
    RADIUS-based central authentication for all Personal deployment modes

Answer

WPA3 improves security over WPA2 by introducing Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks and mandating Protected Management Frames (PMF) to secure management frame exchanges.
WPA3 introduces Simultaneous Authentication of Equals (SAE) to replace the standard WPA2 pre-shared key 4-way handshake, offering protection against offline dictionary brute-force attempts. Additionally, WPA3 requires mandatory implementation of Protected Management Frames (PMF) to prevent malicious disassociation and deauthentication spoofing.

Step-by-Step Solution

1
Identify key authentication upgrades in WPA3-Personal
WPA3 replaces PSK with SAE (Simultaneous Authentication of Equals), rendering offline dictionary attacks ineffective even with weak passphrases.
SAE performs a resistant peer-to-peer key exchange (Dragonfly key exchange protocol).
2
Identify key management frame protections in WPA3
PMF (Protected Management Frames / IEEE 802.11w) is mandatory in WPA3 deployments.
PMF prevents attackers from forging management frames such as deauthentication attacks.

Key Concept

Wireless Security Protocols (WPA3 Features & Enhancements)
Rate this question