Question

Difficulty: MediumWireless Security and Authentication

A systems administrator is configuring a wireless network for a medical office. Company policy mandates that every employee must authenticate individually using their corporate Active Directory network credentials, and all wireless traffic must be encrypted using modern AES encryption. Which of the following wireless security configurations best meets these security requirements?

  1. WPA3-Enterprise using 802.1X authentication with AES encryptionAnswer
  2. B
    WPA2-Personal using a complex pre-shared key (PSK) with AES encryption
  3. C
    WPA3-Personal using Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Enterprise using Temporal Key Integrity Protocol (TKIP) encryption

Answer

WPA3-Enterprise using 802.1X authentication with AES encryption is the correct configuration.
The configuration specifying WPA3-Enterprise with 802.1X authentication and AES encryption directly meets all specified requirements. Enterprise modes implement 802.1X port-based access control, requiring clients to authenticate against an authentication server (e.g., RADIUS) using their individual Active Directory credentials. Furthermore, WPA3 enforces strong AES-based encryption algorithms.

Step-by-Step Solution

1
Identify the authentication requirement
Individual user logins via corporate Active Directory demand an Enterprise security mode using 802.1X and a RADIUS server, rather than a shared passphrase (Personal mode).
Personal modes (PSK/SAE) share one password across all client devices, preventing unique user identification and centralized access revocation.
2
Identify the encryption requirement
The requirement specifies AES encryption.
AES (used in CCMP/GCMP) provides strong, modern data protection, whereas TKIP is a legacy mechanism that is deprecated and insecure.
3
Combine requirements to select the correct wireless mode
WPA3-Enterprise with 802.1X and AES meets both individual authentication and strong encryption requirements.
It combines centralized domain authentication with robust AES-based cryptographic suites.

Key Concept

Wireless Security Modes (Personal vs. Enterprise) and Encryption Standards
Estimated Time:1m 15s
Rate this question