Examkin

Question

Difficulty: MediumWireless Security and Authentication

Match each wireless security implementation or authentication component on the left with its defining operational mechanism or technical requirement on the right.

  • WPA3-PersonalImplements Simultaneous Authentication of Equals (SAE) to protect pre-shared key exchanges from offline dictionary attacks.
  • EAP-TLSProvides high-security mutual authentication by requiring PKI X.509 digital certificates on both server and client endpoints.
  • RADIUS ServerCentralized AAA server that validates 802.1X credentials against a directory database.
  • Captive PortalWeb page redirection mechanism used to authenticate or present terms of service to guest users before granting internet access.

Answer

WPA3-Personal matches with Simultaneous Authentication of Equals (SAE); EAP-TLS matches with mutual certificate authentication; RADIUS Server matches with centralized AAA 802.1X validation; Captive Portal matches with guest web page redirection.
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) for robust password-based authentication. EAP-TLS delivers strong mutual authentication using digital certificates on both the RADIUS server and client devices. A RADIUS server acts as a centralized AAA service verifying 802.1X user credentials against active directory or database services. A Captive Portal intercepts HTTP traffic to present terms or web login screens to guest users.

Step-by-Step Solution

1
Identify the key security mechanism of WPA3-Personal.
Recognize that WPA3-Personal utilizes Simultaneous Authentication of Equals (SAE) to prevent offline brute-force attacks.
SAE replaces traditional PSK four-way handshakes with Dragonfly key exchange.
2
Determine the certificate requirements for EAP-TLS.
Identify that EAP-TLS enforces mutual authentication using PKI certificates on both endpoints.
Unlike PEAP or EAP-TTLS, EAP-TLS mandates client-side X.509 certificates in addition to server certificates.
3
Identify the infrastructure role of a RADIUS server.
Associate RADIUS with backend centralized AAA validation in an 802.1X wireless architecture.
Wireless access points act as authenticators and delegate user authentication to the RADIUS server.
4
Analyze the purpose of a Captive Portal.
Associate Captive Portals with HTTP/HTTPS session redirection for guest access management.
It forces unauthenticated web traffic to a portal landing page prior to authorizing outbound network access.

Key Concept

Wireless Authentication Protocols and Access Control Components
Rate this question

Topics

Wireless Security and Authentication

More questions from this topic