Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network security technician is standardizing wireless access controls across various corporate branch sites based on specific operational requirements. Match each wireless access scenario on the left with the appropriate security protocol or mechanism on the right.

  • Providing centralized user authentication against an Active Directory domain using 802.1X and a RADIUS serverWPA3-Enterprise
  • Securing a small remote office network using a single shared password with AES encryptionWPA2-Personal
  • Redirecting unauthenticated guest users to a web page requiring acceptance of an Acceptable Use Policy (AUP)Captive Portal
  • Implementing mutual authentication requiring digital certificates on both the client device and the authentication serverEAP-TLS

Answer

Centralized 802.1X/RADIUS authentication matches WPA3-Enterprise; SOHO single shared password security matches WPA2-Personal; guest web-page redirection and AUP acceptance matches Captive Portal; mutual authentication using client and server certificates matches EAP-TLS.
Each wireless security control aligns directly with its operational scope: WPA3-Enterprise enables centralized RADIUS/802.1X authentication; WPA2-Personal relies on a PSK for smaller deployments; a Captive Portal forces guest web redirection for terms acceptance; and EAP-TLS delivers robust mutual authentication via client and server certificates.

Step-by-Step Solution

1
Identify authentication mechanisms for corporate domain environments.
Centralized user-based authentication via 802.1X/RADIUS corresponds to WPA3-Enterprise.
Enterprise modes offload credentials handling to a AAA server (like RADIUS) instead of relying on a shared passphrase.
2
Identify security options for SOHO or small branch sites.
Using a Pre-Shared Key (PSK) with AES encryption corresponds to WPA2-Personal.
Personal mode utilizes a single passphrase shared among users, suitable for smaller sites without domain controllers.
3
Identify mechanisms for guest user access management.
Web redirection for terms acceptance corresponds to a Captive Portal.
Captive portals trap initial HTTP/HTTPS traffic from unauthenticated devices to present terms or collect guest login details.
4
Identify advanced certificate-based EAP methods.
Mutual certificate authentication corresponds to EAP-TLS.
EAP-TLS is one of the highest security EAP types because it requires client-side X.509 certificates in addition to server certificates.

Key Concept

Wireless Security Protocols and Authentication Frameworks
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic