Examkin

Question

Difficulty: MediumWireless Security and Authentication

An IT security consultant is upgrading the wireless infrastructure for a regional healthcare clinic. To ensure compliance with patient data privacy regulations, the new network must provide centralized authentication using unique user credentials rather than a shared passphrase, while enforcing mutual authentication to protect against rogue access point attacks. Which of the following security controls and authentication mechanisms should the consultant implement? (Select TWO.)

  1. WPA3-Enterprise operating with an 802.1X RADIUS serverAnswer
  2. EAP-TLS authentication utilizing client and server digital certificatesAnswer
  3. C
    WPA2-Personal configured with Simultaneous Authentication of Equals (SAE)
  4. D
    MAC address filtering combined with disabling SSID broadcast

Answer

WPA3-Enterprise operating with an 802.1X RADIUS server, and EAP-TLS authentication utilizing client and server digital certificates.
WPA3-Enterprise combined with an 802.1X RADIUS server allows central user management and individual account authentication. Implementing EAP-TLS satisfies the mutual authentication requirement because both the server and client validate each other's digital certificates before establishing the encrypted session.

Step-by-Step Solution

1
Identify the authentication requirement for individual credentials
Selecting WPA3-Enterprise (or WPA2-Enterprise) provides 802.1X integration with a central RADIUS server, ensuring individual user authentication instead of a shared passphrase.
Enterprise modes move away from Pre-Shared Keys (PSK) to central directory service authentication.
2
Identify the protocol requirement for mutual authentication against rogue access points
Selecting EAP-TLS enforces mutual authentication using digital certificates on both server and client.
EAP-TLS validates both the RADIUS server certificate on the client side and the client certificate on the server side, preventing connection to unauthorized rogue access points.

Key Concept

Enterprise Wireless Authentication and Mutual Security Controls
Estimated Time:1m 30s
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic