Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network administrator is reconfiguring the wireless network for a growing company. Currently, all employees connect to the internal wireless network using a single shared passphrase. Management is concerned that departed employees retain access after leaving the organization. The administrator needs to implement a wireless security solution that allows each employee to authenticate using their individual central network domain credentials. Which of the following configurations best satisfies this requirement?

  1. WPA3-Enterprise using 802.1X authentication integrated with a RADIUS serverAnswer
  2. B
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  3. C
    WPA2-Personal configured with Temporal Key Integrity Protocol (TKIP) encryption
  4. D
    WPA2-Enterprise configured with MAC address filtering and a pre-shared key

Answer

WPA3-Enterprise using 802.1X authentication integrated with a RADIUS server
WPA3-Enterprise implements the IEEE 802.1X authentication standard, delegating user authentication to an enterprise RADIUS server. This setup allows employees to log into the wireless network using their unique domain credentials, enabling immediate revocation of wireless access when an employee account is disabled.

Step-by-Step Solution

1
Analyze the operational requirement
The company needs per-user authentication tied to central domain accounts to prevent offboarded staff from retaining access.
Shared passphrases (Personal/PSK mode) cannot revoke access for individual users without updating the passphrase on all company devices.
2
Evaluate wireless authentication models
WPA2/WPA3 Enterprise modes mandate the use of the IEEE 802.1X port-based authentication framework, which communicates with a Remote Authentication Dial-In User Service (RADIUS) server.
RADIUS integrates with corporate directory services (such as Active Directory or LDAP) to authenticate individual user accounts.
3
Select the modern, secure configuration
WPA3-Enterprise providing 802.1X authentication with RADIUS fulfills all security requirements.
It secures network access per individual user while applying strong modern encryption standards.

Key Concept

Distinction between WPA Personal (PSK) and WPA Enterprise (802.1X/RADIUS) authentication modes
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic