Question

Difficulty: MediumWireless Security and Authentication

A network technician is configuring wireless access for a medical clinic's administrative staff. Management specifies that all employees must authenticate using their individual corporate domain credentials rather than sharing a single passphrase, and that wireless traffic must be protected with strong AES encryption. Which of the following wireless security configurations best satisfies these requirements?

  1. WPA3-Enterprise utilizing 802.1X and a RADIUS serverAnswer
  2. B
    WPA2-Personal configured with AES-CCMP encryption
  3. C
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  4. D
    WEP Enterprise using 802.1X authentication

Answer

WPA3-Enterprise utilizing 802.1X and a RADIUS server
WPA3-Enterprise uses IEEE 802.1X port-based network access control combined with a RADIUS server. This setup allows each user to authenticate with their unique enterprise domain username and password while delivering high-grade cryptographic protection.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user authentication via corporate credentials requires Enterprise mode (802.1X / RADIUS), eliminating Personal (PSK/SAE) modes.
Personal modes rely on a single shared passphrase across all clients.
2
Identify the encryption requirement
Strong encryption requires modern WPA2 or WPA3 standards rather than deprecated protocols like WEP.
WEP uses weak RC4 encryption that can be compromised within minutes.
3
Select the optimal configuration
WPA3-Enterprise provides both centralized 802.1X user authentication via RADIUS and state-of-the-art encryption.
It fulfills all requirements for security, encryption strength, and individual accountability.

Key Concept

Distinction between WPA Personal (PSK/SAE) and WPA Enterprise (802.1X/RADIUS) modes for wireless security.
Estimated Time:1m 15s
Rate this question