A cybersecurity consultant is hardening a healthcare organization's wireless network infrastructure across multiple clinics. The organization must comply with strict data confidentiality standards and protect against rogue access point impersonation, rogue client connection, and offline password cracking attacks. The infrastructure includes a centralized RADIUS server infrastructure and PKI (Public Key Infrastructure). Which TWO of the following configuration options should be implemented on the enterprise wireless networks to satisfy these security mandates?
- Configure WPA3-Enterprise using EAP-TLS authentication.Answer
- Deploy WPA3-Enterprise operating in 192-bit mode with GCMP-256 encryption.Answer
- CDeploy WPA3-Personal with Simultaneous Authentication of Equals (SAE) fallback to WPA2-PSK (TKIP).
- DImplement PEAP-MSCHAPv2 with WPA2-Enterprise and disable server certificate verification on client profiles.
Answer
The correct configurations are deploying WPA3-Enterprise utilizing EAP-TLS authentication and enabling WPA3-Enterprise 192-bit mode with GCMP-256 encryption.
WPA3-Enterprise with EAP-TLS enforces mutual certificate authentication using RADIUS and PKI, protecting against rogue AP attacks and unauthorized client connections. Furthermore, WPA3-Enterprise 192-bit mode utilizing GCMP-256 provides enterprise-grade cryptographic strength necessary for protecting sensitive regulatory data.
Step-by-Step Solution
Key Concept
Enterprise Wireless Authentication Protocols and Encryption Standards (WPA3-Enterprise, 802.1X/RADIUS, EAP-TLS)
Estimated Time:2m 0s