Examkin

Question

Difficulty: MediumWireless Security and Authentication

Match each wireless security protocol or implementation component on the left with its corresponding operational requirement or security characteristic on the right.

  • EAP-TLSRequires digital certificates on both the client device and authentication server for mutual authentication.
  • WPA3-PersonalUtilizes Simultaneous Authentication of Equals (SAE) to protect pre-shared keys against offline dictionary attacks.
  • RADIUS ServerActs as the centralized authentication service in an 802.1X enterprise architecture to validate user credentials.
  • Captive PortalIntercepts network traffic to display an authentication web page or AUP agreement prior to granting guest access.

Answer

EAP-TLS matches with mutual certificate requirement; WPA3-Personal matches with Simultaneous Authentication of Equals (SAE); RADIUS Server matches with centralized 802.1X AAA authentication service; Captive Portal matches with web traffic interception for guest authentication/AUP.
Each wireless security technology matches its specific operational feature: EAP-TLS provides mutual authentication using client and server digital certificates. WPA3-Personal uses Simultaneous Authentication of Equals (SAE) to resist offline dictionary attacks on pre-shared keys. RADIUS serves as the central AAA server in 802.1X wireless environments. A Captive Portal redirects unauthenticated web sessions to a landing page for credential entry or acceptable use policy acceptance.

Step-by-Step Solution

1
Identify authentication mechanisms requiring client-side certificates vs pre-shared keys.
EAP-TLS strictly requires digital certificates on both client and server, whereas WPA3-Personal relies on a passphrase secured via SAE.
Enterprise EAP methods differ fundamentally in certificate requirement for client devices.
2
Determine the backend component responsible for centralized credential validation in enterprise wireless.
RADIUS acts as the authentication server validating 802.1X requests against an identity provider like Active Directory.
Access points forward EAP messages to a backend RADIUS server during 802.1X authentication.
3
Identify web-based guest network access mechanisms.
Captive portals intercept HTTP/HTTPS requests to present policy agreements or web login forms before granting access.
Guest wireless deployments routinely implement web redirection instead of 802.1X or static PSKs.

Key Concept

Wireless Authentication Protocols and Enterprise Access Controls
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic