An enterprise organization is updating its Cisco Wireless LAN Controller (WLC) security baseline to align with WPA3 specification standards across all branch locations. Which TWO architectural and security protocol enhancements are introduced when transitioning infrastructure from WPA2 to WPA3? (Select TWO.)
- WPA3-Personal replaces the PSK 4-way handshake with Simultaneous Authentication of Equals (SAE) to provide forward secrecy and mitigate offline dictionary attacks.Answer
- WPA3 mandates the implementation of Protected Management Frames (PMF / IEEE 802.11w) for all client connections to protect unicast and multicast management actions against spoofing.Answer
- CWPA3-Enterprise deprecates AES-CCMP encryption and mandates Temporal Key Integrity Protocol (TKIP) with re-keying to reduce CPU overhead on lightweight APs.
- DWPA3-Enterprise eliminates the need for 802.1X/EAP authentication servers by implementing pre-shared static master keys across the WLAN controller infrastructure.
Answer
WPA3 introduces key cryptographic enhancements: WPA3-Personal replaces standard PSK handshakes with Simultaneous Authentication of Equals (SAE) to guard against offline brute-force attacks, and WPA3 mandates Protected Management Frames (PMF/802.11w) to stop management frame spoofing.
WPA3 enhances wireless network security by introducing Simultaneous Authentication of Equals (SAE) for Personal modes to defend against offline dictionary attacks and enforcing Protected Management Frames (PMF / IEEE 802.11w) to stop deauthentication attacks.
Step-by-Step Solution
Key Concept
WPA3 Wireless Security Enhancements (SAE and PMF)
Estimated Time:1m 30s