Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network administrator is configuring a wireless network for a university research lab. The institution's security policy requires individual user authentication against a centralized directory service and strong AES encryption for all wireless traffic. Which TWO of the following configurations must the administrator implement on the wireless access points to fulfill these security requirements?

  1. WPA3-Enterprise security modeAnswer
  2. 802.1X port-based authentication pointing to a RADIUS serverAnswer
  3. C
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Personal utilizing TKIP encryption

Answer

The administrator must select WPA3-Enterprise security mode and configure 802.1X port-based authentication pointing to a RADIUS server.
To meet the mandate for individual user authentication via a central directory along with strong AES encryption, the administrator must configure WPA3-Enterprise mode and implement 802.1X port-based authentication pointing to a RADIUS server. Enterprise wireless modes rely on 802.1X to relay authentication requests to a backend authentication server (such as RADIUS connected to Active Directory) and leverage modern AES encryption algorithms.

Step-by-Step Solution

1
Analyze authentication requirements
The requirement calls for centralized, individual user authentication rather than a shared passphrase, requiring Enterprise mode (802.1X) connected to a RADIUS server.
Personal modes (PSK/SAE) rely on a single shared key across all devices, failing the centralized individual credential requirement.
2
Analyze encryption requirements
Strong AES encryption must be selected (CCMP/GCMP).
TKIP is deprecated and vulnerable, whereas WPA3-Enterprise mandates robust AES-based encryption algorithms.

Key Concept

WPA3-Enterprise and 802.1X/RADIUS for centralized wireless security
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic