Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network technician is configuring a SOHO wireless router for a small law firm. The firm wants to upgrade its wireless security to protect against offline password dictionary attacks and packet eavesdropping, but lacks the infrastructure to deploy a RADIUS server for central authentication. Which of the following wireless security standards should the technician implement?

  1. WPA3-PersonalAnswer
  2. B
    WPA2-Personal
  3. C
    WPA2-Enterprise
  4. D
    WPA-TKIP

Answer

WPA3-Personal should be implemented because it utilizes Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks while operating in pre-shared key mode without requiring a RADIUS server.
WPA3-Personal introduces Simultaneous Authentication of Equals (SAE) to replace the Pre-Shared Key (PSK) mechanism. SAE ensures forward secrecy and prevents offline dictionary attacks against captured handshake frames, fulfilling the firm's security goals without requiring an 802.1X/RADIUS server deployment.

Step-by-Step Solution

1
Analyze the scenario constraints and security objectives
The firm requires protection against offline dictionary attacks without deploying a RADIUS server.
SOHO environments without centralized AAA servers cannot implement 802.1X/Enterprise authentication modes.
2
Evaluate candidate wireless security standards
WPA3-Personal replaces the traditional WPA2 Pre-Shared Key (PSK) 4-way handshake with Simultaneous Authentication of Equals (SAE).
SAE prevents offline dictionary cracking even if a passphrase is weak, fulfilling both security and infrastructure requirements.

Key Concept

WPA3-Personal authentication mechanisms and Simultaneous Authentication of Equals (SAE)
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic