Examkin

Question

Difficulty: HardWireless Security and Authentication

A network administrator is evaluating authentication methods and security protocols for a corporate wireless network deployment. Match each wireless security protocol or framework on the left with its defining technical requirement or operational feature on the right.

  • EAP-TLSMandates mutual authentication using digital certificates on both the server and all client devices.
  • PEAP / EAP-TTLSEstablishes an encrypted TLS tunnel using only a server certificate, enabling clients to authenticate via passwords.
  • WPA3-Personal (SAE)Replaces standard pre-shared keys with a key exchange mechanism resistant to offline dictionary attacks.
  • 802.1X with RADIUSProvides centralized port-based network access control by relaying EAP payloads to an authentication server.

Answer

EAP-TLS matches mutual certificate authentication; PEAP / EAP-TTLS matches tunneled authentication with server-side certificates; WPA3-Personal (SAE) matches key exchange resistant to offline dictionary attacks; 802.1X with RADIUS matches centralized port-based access control.
Each protocol or framework is accurately paired with its primary technical requirement: EAP-TLS relies on mutual certificates, PEAP/EAP-TTLS tunnels password authentication via a server certificate, WPA3-Personal employs SAE to protect against dictionary attacks, and 802.1X with RADIUS provides centralized port-based network authentication.

Step-by-Step Solution

1
Identify the authentication requirements for mutual certificate-based EAP frameworks.
EAP-TLS requires certificates installed on both the client and server for mutual authentication.
EAP-TLS is uniquely defined by dual-sided certificate verification.
2
Differentiate tunneled EAP methods that simplify client onboarding.
PEAP and EAP-TTLS require only a server certificate to establish a secure tunnel for user credentials.
This avoids managing client-side certificates while securing password transmission.
3
Analyze key authentication mechanisms in modern WPA3 standards.
WPA3-Personal uses SAE (Simultaneous Authentication of Equals) to protect pre-shared key exchanges.
SAE provides forward secrecy and protects against offline password guessing.
4
Determine the overarching access control architecture for enterprise wireless networks.
802.1X with RADIUS handles port-based access control and relays EAP packets to a centralized directory server.
802.1X acts as the authentication framework transport mechanism.

Key Concept

Wireless Authentication Frameworks and Protocol Characteristics
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic