Question

Difficulty: EasyWireless Security Protocols (WPA, WPA2, WPA3)

Match each wireless security protocol standard on the left with its defining cryptographic capability or key exchange mechanism on the right.

  • WPA (Legacy)Employs TKIP encryption cipher suite with RC4 to provide temporary legacy security
  • WPA2-PersonalMandates AES-CCMP encryption and utilizes a 4-way handshake with a Pre-Shared Key (PSK)
  • WPA3-PersonalReplaces PSK with Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks
  • WPA3-EnterpriseRequires Protected Management Frames (PMF) by default and supports an optional 192-bit security suite

Answer

WPA (Legacy) pairs with TKIP/RC4 cipher suite; WPA2-Personal pairs with AES-CCMP and PSK 4-way handshake; WPA3-Personal pairs with SAE key exchange; WPA3-Enterprise pairs with mandatory PMF and optional 192-bit security mode.
Each wireless security protocol standard corresponds directly to its cryptographic cipher suite and authentication mechanism: legacy WPA uses TKIP/RC4, WPA2-Personal uses AES-CCMP with PSK authentication, WPA3-Personal uses SAE to defend against dictionary attacks, and WPA3-Enterprise enforces Protected Management Frames (PMF) alongside an optional 192-bit encryption suite.

Step-by-Step Solution

1
Identify the legacy WPA mechanism
WPA relies on TKIP and RC4 encryption.
Original WPA was created as an interim standard to improve WEP security without replacing hardware.
2
Identify WPA2-Personal standard features
WPA2-Personal standardizes AES-CCMP encryption with PSK authentication using a 4-way handshake.
IEEE 802.11i compliance mandated AES encryption for strong baseline confidentiality.
3
Identify WPA3-Personal enhancements
WPA3-Personal uses SAE (Simultaneous Authentication of Equals) instead of PSK.
SAE provides forward secrecy and protects against passive eavesdropping and offline dictionary attacks.
4
Identify WPA3-Enterprise features
WPA3-Enterprise mandates Protected Management Frames (PMF) and supports optional 192-bit encryption.
PMF protects management traffic against spoofing, while 192-bit mode supports high-security environments.

Key Concept

Wireless Security Protocols (WPA, WPA2, WPA3)
Rate this question