Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network administrator is deploying a new wireless network for corporate laptops at a financial services firm. Corporate policy requires that every employee authenticate individually using their corporate domain credentials and that the network use the highest available encryption standard without relying on a shared passphrase. Which TWO of the following configurations should the administrator implement?

  1. WPA3-Enterprise security modeAnswer
  2. 802.1X authentication backed by a RADIUS serverAnswer
  3. C
    WPA3-Personal mode with Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Personal mode with TKIP encryption

Answer

WPA3-Enterprise security mode and 802.1X authentication backed by a RADIUS server
Selecting WPA3-Enterprise security mode alongside 802.1X authentication backed by a RADIUS server fulfills all corporate requirements. WPA3-Enterprise provides modern enterprise-class encryption, while 802.1X with RADIUS passes authentication requests to centralized identity stores like Active Directory so each user logs in with unique individual credentials.

Step-by-Step Solution

1
Analyze the user authentication requirement
Individual user authentication using network domain credentials requires an enterprise authentication framework (802.1X) integrated with an authentication server such as RADIUS.
Personal wireless modes rely on a single shared passphrase across all clients, failing the requirement for unique individual user logins.
2
Determine the required wireless security standard
The highest modern encryption standard that supports 802.1X enterprise authentication without pre-shared keys is WPA3-Enterprise.
WPA3-Enterprise utilizes robust encryption suites and enforces centralized 802.1X authentication.

Key Concept

WPA3-Enterprise and 802.1X/RADIUS authentication for corporate wireless networks
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic