Examkin

Question

Difficulty: MediumWireless Security and Authentication

A systems administrator is configuring a wireless access point for corporate employees. To comply with internal security policies, the wireless network must enforce individual credential authentication integrated with the central Active Directory domain, while disallowing vulnerable legacy protocols like TKIP. Which of the following security configurations should the administrator implement?

  1. WPA3-Enterprise utilizing 802.1X authentication and RADIUSAnswer
  2. B
    WPA2-Personal utilizing a Pre-Shared Key (PSK) with TKIP fallback
  3. C
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Enterprise utilizing Wi-Fi Protected Setup (WPS) PIN authentication

Answer

WPA3-Enterprise utilizing 802.1X authentication and RADIUS
WPA3-Enterprise requires an 802.1X RADIUS server infrastructure to authenticate users individually against central directory services like Active Directory. Furthermore, WPA3 enforces strong AES encryption standards, satisfying all security policy mandates.

Step-by-Step Solution

1
Identify the authentication requirement
Individual domain credentials require an Enterprise security framework utilizing 802.1X and RADIUS rather than a shared passphrase.
Personal modes (PSK/SAE) share a single key among all users, preventing individual user accounting and domain integration.
2
Identify the encryption standard requirement
WPA3 mandates modern AES-based cipher suites (such as CCMP/GCMP) and disallows legacy TKIP.
TKIP has known cryptographic weaknesses and is deprecated across modern wireless security standards.
3
Select the matching configuration option
WPA3-Enterprise satisfies both individual authentication and secure encryption criteria.
It combines 802.1X network access control with strong mandatory AES encryption.

Key Concept

Enterprise Wireless Security (802.1X / RADIUS vs. Personal PSK/SAE)
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic