Examkin

Question

Difficulty: MediumWireless Security Protocols (WPA, WPA2, WPA3)

An engineer audits an enterprise wireless deployment configured strictly for WPA3-Enterprise mode. During client connectivity testing, older legacy wireless client devices fail to associate with the SSID, even though their security profiles are configured with valid 802.1X EAP credentials. What mandatory feature of WPA3 security causes these legacy clients to fail association?

  1. Protected Management Frames (PMF) are strictly required for all associations.Answer
  2. B
    RADIUS authentication traffic must be negotiated directly between the client and RADIUS server without access point participation.
  3. C
    Pre-Shared Keys (PSK) must be negotiated alongside 802.1X credentials during the 4-way handshake.
  4. D
    Temporal Key Integrity Protocol (TKIP) is required as the default broadcast cipher suite.

Answer

Protected Management Frames (PMF) are strictly required for all associations.
Under the Wi-Fi Alliance WPA3 standard specification, Protected Management Frames (PMF / IEEE 802.11w) transition from being optional (as in WPA2) to strictly mandatory. Any legacy wireless client device that lacks support for PMF capability negotiation is rejected at association time by a WPA3-configured access point.

Step-by-Step Solution

1
Identify the protocol requirements introduced in the WPA3 wireless security standard.
WPA3 introduces mandatory Protected Management Frames (PMF / IEEE 802.11w) for both Personal and Enterprise operating modes.
PMF protects management frames such as deauthentication and disassociation from spoofing and eavesdropping attacks.
2
Evaluate the impact of mandatory PMF on legacy client devices.
Clients that do not support 802.11w PMF or only support optional PMF negotiation cannot complete the association handshake with an SSID running pure WPA3.
When an access point operates in WPA3 mode, PMF requirement is set to Required (Required/Mandatory), rejecting legacy clients lacking PMF support.

Key Concept

WPA3 Mandatory Protected Management Frames (PMF / IEEE 802.11w)
Rate this question

Topics

Wireless Security Protocols (WPA, WPA2, WPA3)

More questions from this topic