Question

Difficulty: EasyWireless Security and Authentication

A technician is upgrading a wireless access point in a small office to enhance authentication security and migrate away from legacy pre-shared keys. The technician selects WPA3-Personal mode. Which of the following features and requirements are introduced by WPA3-Personal? (Select TWO.)

  1. Mandatory requirement for Protected Management Frames (PMF)Answer
  2. Simultaneous Authentication of Equals (SAE) key exchangeAnswer
  3. C
    Centralized RADIUS server authentication for enterprise credential mapping
  4. D
    Fallback integration with Temporal Key Integrity Protocol (TKIP)

Answer

The correct responses are the mandatory requirement for Protected Management Frames (PMF) and the use of Simultaneous Authentication of Equals (SAE) key exchange.
WPA3-Personal improves SOHO wireless security by replacing WPA2 Pre-Shared Key (PSK) with Simultaneous Authentication of Equals (SAE) (Dragonfly handshake) to resist offline dictionary attacks. Additionally, WPA3 strictly mandates Protected Management Frames (PMF) to shield management traffic from interception and spoofed disconnect commands.

Step-by-Step Solution

1
Identify the authentication and key exchange enhancement in WPA3-Personal.
WPA3-Personal replaces standard Pre-Shared Key (PSK) passphrase exchanges with Simultaneous Authentication of Equals (SAE), preventing brute-force and offline dictionary attacks.
SAE provides resistant key exchange even when passwords are simple.
2
Identify mandatory security features required by the WPA3 specification.
Protected Management Frames (PMF) are compulsory in WPA3 networks.
PMF prevents spoofed deauthentication frames and eavesdropping on wireless management messaging.

Key Concept

WPA3-Personal Security Enhancements (SAE and PMF)
Estimated Time:1m 0s
Rate this question