Examkin

Question

Difficulty: MediumWireless Security Protocols (WPA, WPA2, WPA3)

A network administrator is upgrading a corporate Wireless LAN Controller (WLC) to meet stringent government cryptographic requirements. The administrator configures a new SSID operating in WPA3-Enterprise 192-bit mode. Which encryption cipher suite is mandated by WPA3-Enterprise 192-bit mode to protect data payload frames?

  1. GCMP-256 (Galois/Counter Mode Protocol with 256-bit encryption)Answer
  2. B
    CCMP-128 (Counter Mode Cipher Block Chaining Message Authentication Code Protocol with 128-bit encryption)
  3. C
    TKIP (Temporal Key Integrity Protocol with 128-bit encryption)
  4. D
    RC4 (Rivest Cipher 4 with 128-bit static keying)

Answer

GCMP-256 (Galois/Counter Mode Protocol with 256-bit encryption)
Galois/Counter Mode Protocol with 256-bit encryption (GCMP-256) is mandated by the IEEE 802.11i / WPA3 specifications for WPA3-Enterprise 192-bit mode. This mode provides higher-grade cryptographic protection aligned with Commercial National Security Algorithm (CNSA) suite standards.

Step-by-Step Solution

1
Identify the specific wireless security framework and operational mode requested
The scenario specifies WPA3-Enterprise in 192-bit security mode (CNSA suite compliant).
Different WPA3 operating modes specify distinct cryptographic algorithms and key sizes.
2
Evaluate the cipher suite requirements for WPA3-Enterprise 192-bit mode
WPA3-Enterprise 192-bit mode requires GCMP-256 for authenticated data encryption, BIP-GMAC-256 for management frame protection, and EAP-TLS with SHA-384 for authentication.
Standard WPA2/WPA3 Enterprise 128-bit modes use CCMP-128, whereas 192-bit mode upgrades the cipher suite to 256-bit GCMP.

Key Concept

WPA3-Enterprise 192-bit Security Mode Requirements
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic