Examkin

Question

Difficulty: MediumWireless Security Protocols (WPA, WPA2, WPA3)

A network technician is inspecting authentication behavior on a newly deployed Wi-Fi network configured for personal use. The security policy mandates protection against passive eavesdropping and offline password-dictionary attacks by utilizing a Dragonfly Key Exchange during association. Which wireless security protocol mechanism provides this specific key exchange functionality?

  1. Simultaneous Authentication of Equals (SAE)Answer
  2. B
    Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  3. C
    Extensible Authentication Protocol-Flexible Authentication via Secure Tunneling (EAP-FAST)
  4. D
    Pre-Shared Key (PSK) 4-Way Handshake

Answer

Simultaneous Authentication of Equals (SAE)
Simultaneous Authentication of Equals (SAE) is the key exchange mechanism specified in WPA3-Personal. Built upon the Dragonfly Key Exchange protocol, SAE establishes a secure cryptographic key between the client and access point without revealing the passphrase, rendering captured authentication traffic immune to offline dictionary brute-force attempts.

Step-by-Step Solution

1
Identify the primary requirement in the scenario
The scenario requires a wireless security mechanism that uses Dragonfly Key Exchange to prevent offline dictionary attacks in a personal Wi-Fi deployment.
WPA3-Personal replaces the vulnerable WPA2 Pre-Shared Key (PSK) handshake with a secure zero-knowledge proof exchange.
2
Evaluate the key exchange protocol associated with WPA3-Personal
Simultaneous Authentication of Equals (SAE) is the standard protocol defined in IEEE 802.11-2016 / WPA3 for secure peer-to-peer key agreement using Dragonfly algorithm cryptography.
SAE guarantees forward secrecy and prevents brute-force dictionary attacks even when weak passwords are used.

Key Concept

WPA3-Personal Key Exchange via SAE
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic