A network administrator is deploying a wireless network for a corporate headquarters. Organization policy requires that every employee authenticate using their individual enterprise user credentials against a central authentication server, preventing the operational overhead and security risk of static pre-shared keys. Which wireless security standard and authentication mechanism should the administrator implement to fulfill these security requirements?
- WPA3-Enterprise utilizing 802.1X authentication integrated with a central RADIUS serverAnswer
- BWPA3-Personal utilizing Simultaneous Authentication of Equals (SAE) linked directly to the central RADIUS server
- CWPA2-Personal utilizing static pre-shared keys (PSK) alongside TACACS+ for user identity verification
- DWPA3-Enterprise utilizing SNMPv3 to securely issue and rotate pre-shared keys across client devices
Answer
WPA3-Enterprise utilizing 802.1X authentication integrated with a central RADIUS server is the correct implementation.
WPA3-Enterprise uses the IEEE 802.1X port-based network access control standard to pass authentication requests between clients and an enterprise RADIUS server. This allows every user to log in with individual credentials rather than sharing a passphrase.
Step-by-Step Solution
Key Concept
WPA3-Enterprise and 802.1X/RADIUS Authentication