Examkin

Question

Difficulty: MediumWireless Security Protocols (WPA, WPA2, WPA3)

A network administrator is deploying a high-security wireless LAN on a Cisco Wireless LAN Controller (WLC) configured for WPA3-Enterprise authentication. Which operational feature is mandatory for all client devices connecting to this WLAN?

  1. Support and active enforcement of Protected Management Frames (PMF)Answer
  2. B
    Direct TACACS+ authentication negotiation between the client and the access point
  3. C
    Configuration of access points in FlexConnect local switching mode to authenticate EAP requests independently
  4. D
    An explicit Layer 2 MAC Access Control List (ACL) configured on the WLC to bypass EAP-TLS exchange

Answer

Support and active enforcement of Protected Management Frames (PMF)
The WPA3 security specification makes Protected Management Frames (PMF, IEEE 802.11w) mandatory for all device connections in both WPA3-Personal and WPA3-Enterprise deployments. PMF protects unicast and multicast management frames—such as deauthentication and disassociation frames—against eavesdropping and spoofing.

Step-by-Step Solution

1
Identify the key cryptographic and structural enhancements introduced by the WPA3 standard.
Recognize that Protected Management Frames (PMF / IEEE 802.11w) are mandatory across all WPA3 modes (Personal and Enterprise).
PMF prevents attackers from forging management frames, such as deauthentication or disassociation packets, mitigating Wireless DoS attacks.
2
Evaluate client-side compatibility requirements for joining WPA3 WLANs.
Determine that connected clients must explicitly support PMF negotiation during association.
Unlike WPA2 where PMF was optional, WPA3 enforces PMF as a non-negotiable security baseline.

Key Concept

WPA3 Mandatory Protected Management Frames (PMF)
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic