Examkin

Question

Difficulty: HardWireless Security and Authentication

A network security administrator is deploying a wireless network for an enterprise client's corporate headquarters. The client's security policy strictly requires individual user authentication backed by a centralized RADIUS server, along with modern encryption that eliminates legacy cipher vulnerabilities. Which of the following wireless security configurations should the administrator implement to meet these requirements?

  1. WPA3-Enterprise utilizing 802.1X authentication with AES encryptionAnswer
  2. B
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  3. C
    WPA2-Enterprise utilizing Temporal Key Integrity Protocol (TKIP)
  4. D
    WPA2-Personal utilizing a Pre-Shared Key (PSK) with AES encryption

Answer

WPA3-Enterprise utilizing 802.1X authentication with AES encryption
WPA3-Enterprise provides 802.1X framework integration with centralized RADIUS servers for individual credential authentication, while utilizing modern AES-based cipher suites (such as GCMP/CCMP) to secure wireless communications.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user authentication backed by a RADIUS server requires an Enterprise security mode using 802.1X rather than a Personal (Pre-Shared Key / SAE) mode.
Enterprise modes integrate with centralized identity providers (such as RADIUS and Active Directory) to authenticate each user individually.
2
Evaluate the encryption and protocol security requirements
WPA3-Enterprise provides state-of-the-art encryption algorithms (CCMP/GCMP) and eliminates legacy, insecure ciphers such as TKIP.
Legacy ciphers like TKIP are deprecated due to security vulnerabilities, and Personal modes cannot provide per-user authentication logs or individual credential revocation.
3
Select the correct wireless configuration
WPA3-Enterprise with 802.1X authentication meets both the centralized per-user authentication requirement and modern encryption standards.
It combines RADIUS-backed 802.1X EAP authentication with robust modern ciphers.

Key Concept

WPA2/WPA3 Enterprise vs. Personal Authentication and Encryption Standards
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic