Examkin

Question

Difficulty: MediumWireless Security and Authentication

A network technician is configuring wireless security settings across various company locations and access scenarios. Match each wireless security requirement or deployment scenario on the left to its corresponding technology or protocol on the right.

  • An enterprise deployment requiring individual user authentication via 802.1X and a RADIUS serverWPA2-Enterprise
  • A legacy wireless encryption standard introduced to temporarily patch WEP vulnerabilities using TKIPWPA
  • A modern SOHO wireless security standard using Simultaneous Authentication of Equals (SAE) to prevent dictionary attacksWPA3-Personal
  • A guest wireless setup that redirects HTTP traffic to a web page requiring acceptance of an acceptable use policy before granting network accessCaptive Portal

Answer

1. Enterprise 802.1X authentication matches WPA2-Enterprise.
2. Legacy TKIP standard matches WPA.
3. Modern SAE SOHO standard matches WPA3-Personal.
4. Web page redirection for guest access matches Captive Portal.
Each wireless security technology matches its exact operational characteristics: WPA2-Enterprise provides 802.1X/RADIUS authentication; WPA relies on TKIP; WPA3-Personal uses SAE for enhanced PSK protection; and Captive Portals manage guest network landing page redirection.

Step-by-Step Solution

1
Analyze enterprise authentication requirements requiring RADIUS and 802.1X.
Identify that 802.1X authentication with central user account management corresponds to Enterprise security modes (WPA2-Enterprise).
Enterprise modes use EAP and RADIUS servers for individual user credentials rather than pre-shared keys.
2
Evaluate legacy encryption mechanisms designed to address original WEP weaknesses.
Identify TKIP as the protocol created for the original WPA standard.
WPA added TKIP as a temporary security patch compatible with existing WEP network hardware.
3
Examine modern SOHO passphrase authentication enhancements against offline password guessing.
Identify SAE as the core authentication protocol introduced in WPA3-Personal.
SAE performs a secure key exchange that makes offline dictionary attacks ineffective even with weak passwords.
4
Determine the mechanism used for web page redirection and terms acceptance on guest networks.
Identify Captive Portal as the access control mechanism for guest networks.
Captive portals intercept unauthenticated HTTP traffic to present login or landing pages.

Key Concept

Wireless Security Protocols and Authentication Frameworks
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic