Examkin

Question

Difficulty: EasyWireless Security Protocols (WPA, WPA2, WPA3)

A network administrator is upgrading a wireless deployment to implement the WPA3-Personal security standard. Which key exchange mechanism does WPA3-Personal introduce to protect against offline dictionary attacks?

  1. Simultaneous Authentication of Equals (SAE)Answer
  2. B
    Temporal Key Integrity Protocol (TKIP)
  3. C
    Pre-Shared Key (PSK) 4-Way Handshake
  4. D
    Extensible Authentication Protocol (EAP-TLS)

Answer

Simultaneous Authentication of Equals (SAE)
Simultaneous Authentication of Equals (SAE) is the mandatory replacement for Pre-Shared Key (PSK) authentication in WPA3-Personal. SAE utilizes the Dragonfly handshake protocol, which prevents attackers from performing offline dictionary attacks against captured wireless handshakes.

Step-by-Step Solution

1
Identify the key security enhancement introduced specifically in WPA3-Personal over WPA2-Personal.
WPA3-Personal replaces the standard PSK 4-way handshake with a key exchange protocol resistant to password guessing attacks.
WPA2-Personal relied on a pre-shared key (PSK) 4-way handshake that was susceptible to offline dictionary attacks if an attacker captured the initial handshake frames.
2
Match the protocol mechanism name with its function in WPA3.
Simultaneous Authentication of Equals (SAE) is the Dragonfly-based key exchange mechanism that fulfills this requirement.
SAE provides forward secrecy and prevents brute-force passive offline dictionary cracking attempts even when weak passphrases are used.

Key Concept

WPA3-Personal SAE Key Exchange Mechanism
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic