Question

Difficulty: MediumWireless Security and Authentication

A field service technician is setting up a new wireless access point for a regional logistics branch. Central corporate security policy mandates that all employee wireless connections must be authenticated individually using their corporate Active Directory user accounts, and all transmitted data must be protected using strong AES encryption. Which of the following wireless security standards should the technician configure on the access point?

  1. WPA3-Enterprise integrated with a RADIUS serverAnswer
  2. B
    WPA3-Personal configured with a complex pre-shared key
  3. C
    WPA2-Personal with TKIP encryption and MAC address filtering
  4. D
    WPA2-Enterprise configured with WEP legacy fallback mode

Answer

WPA3-Enterprise integrated with a RADIUS server
WPA3-Enterprise uses 802.1X network access control to forward user credentials to a central RADIUS server, enabling authentication against domain directories like Active Directory while enforcing AES-based wireless encryption.

Step-by-Step Solution

1
Identify authentication requirement
Individual user authentication against Active Directory is required.
Enterprise security modes (802.1X) pass authentication requests to a central RADIUS server connected to Active Directory, whereas Personal modes use a single shared passphrase.
2
Identify encryption requirement
AES encryption is mandatory for wireless traffic.
WPA3-Enterprise enforces strong AES-based encryption algorithms (such as CCMP/GCMP) while prohibiting weak ciphers like TKIP or WEP.
3
Select matching configuration
WPA3-Enterprise integrated with a RADIUS server satisfies all technical and compliance constraints.
It combines 802.1X RADIUS authentication for individual credential validation with modern AES encryption standards.

Key Concept

Wireless Security and Authentication (Enterprise 802.1X/RADIUS vs Personal PSK)
Rate this question