Question

Difficulty: MediumWireless Security and Authentication

A desktop technician is configuring a new wireless network for a company's administrative branch. Management mandates that every employee must authenticate individually using their domain credentials rather than relying on a shared passphrase. Which of the following wireless security configurations should the technician implement to meet these security requirements?

  1. WPA3-Enterprise utilizing 802.1X and a RADIUS serverAnswer
  2. B
    WPA3-Personal using Simultaneous Authentication of Equals (SAE)
  3. C
    WPA2-Personal configured with TKIP encryption and a complex passphrase
  4. D
    WPA2-Enterprise configured with Wi-Fi Protected Setup (WPS) provisioning

Answer

WPA3-Enterprise utilizing 802.1X and a RADIUS server
WPA3-Enterprise incorporates the 802.1X framework connected to a central RADIUS server. This standard allows network users to authenticate individually using their personal domain/Active Directory accounts, fulfilling the corporate security requirement for distinct user access control.

Step-by-Step Solution

1
Identify the authentication requirement from the scenario.
The network requires individual user authentication backed by corporate domain credentials.
Individual credential tracking requires an enterprise authentication framework rather than a shared key.
2
Distinguish between Personal and Enterprise wireless modes.
Personal (PSK/SAE) modes rely on a single shared passphrase for all devices, while Enterprise modes utilize 802.1X to query a RADIUS server.
Only 802.1X/RADIUS integration allows authenticating users individually against Active Directory.
3
Select the modern, secure Enterprise wireless standard.
WPA3-Enterprise utilizing 802.1X and a RADIUS server meets both the security standards and individual authentication requirements.
WPA3-Enterprise provides enterprise-grade encryption combined with centralized 802.1X credential validation.

Key Concept

Wireless Security Modes (Personal vs. Enterprise 802.1X/RADIUS)
Rate this question