Question

Difficulty: EasyWireless Security and Authentication

An IT technician needs to update an organization's wireless network configuration so that employees authenticate with their own individual domain credentials rather than using a single shared password. Which of the following options must be implemented to support this authentication method? (Select TWO).

  1. WPA2 or WPA3 Enterprise mode on the wireless access pointsAnswer
  2. A RADIUS server configured for 802.1X authenticationAnswer
  3. C
    Pre-shared keys (PSK) distributed to authorized users
  4. D
    Temporal Key Integrity Protocol (TKIP) encryption

Answer

To implement individual user authentication on a wireless network, the administrator must configure the access points for Enterprise mode (WPA2/WPA3 Enterprise) and deploy a RADIUS server supporting 802.1X authentication.
Enterprise security modes (WPA2-Enterprise and WPA3-Enterprise) utilize 802.1X network access control. This setup relies on a RADIUS (Remote Authentication Dial-In User Service) server to validate individual user account credentials against a centralized directory service.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user credentials are required instead of a single shared network key.
SOHO or Personal wireless modes rely on Pre-Shared Keys (PSK) shared by everyone, whereas Enterprise modes support 802.1X individual login verification.
2
Determine the necessary network infrastructure components
Configure access points to use Enterprise mode and point them to a RADIUS server.
Enterprise mode delegates authentication duties to an 802.1X RADIUS server, which checks each user's credentials against a directory database.

Key Concept

802.1X and RADIUS integration for WPA2/WPA3 Enterprise authentication
Rate this question