Question

Difficulty: MediumWireless Security and Authentication

A field technician is configuring wireless access points for a corporate branch office. The company's security policy requires authenticating each user individually through an active central RADIUS server rather than utilizing a shared pre-shared key, while enforcing high-grade modern encryption. Which of the following security options should the technician select on the access points to satisfy these requirements? (Select TWO.)

  1. WPA3-Enterprise operational modeAnswer
  2. 802.1X authentication frameworkAnswer
  3. C
    WPA3-Personal with Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Personal with Temporal Key Integrity Protocol (TKIP)

Answer

The technician should select WPA3-Enterprise operational mode and 802.1X authentication framework.
WPA3-Enterprise mode combined with 802.1X port-based authentication allows wireless access points to offload user identity verification to an enterprise RADIUS server, satisfying the requirement for individual domain credentials and strong modern encryption.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user authentication via a central RADIUS server requires an enterprise-level mode using the 802.1X port-based access control standard.
Personal modes (PSK/SAE) rely on a single shared passphrase for all connected devices and cannot authenticate individual domain users.
2
Identify the modern wireless encryption requirement
WPA3-Enterprise provides modern, robust encryption methods suitable for high-security corporate environments.
WPA3 is the current wireless security standard, replacing older protocols such as WPA2 and WEP/TKIP.

Key Concept

Wireless Security Modes and Enterprise Authentication (802.1X / RADIUS)
Estimated Time:1m 15s
Rate this question