Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network technician is provisioning an isolated Wi-Fi network for temporary contractors at a branch office. The organization requires protection against offline dictionary attacks and passive eavesdropping, but explicitly wants to avoid the operational complexity of deploying an 802.1X RADIUS server or digital certificates. Which wireless security standard and authentication mechanism best meets these specifications?

  1. WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)Answer
  2. B
    WPA3-Enterprise utilizing 802.1X RADIUS authentication
  3. C
    WPA2-Personal utilizing a Pre-Shared Key (PSK) with AES-CCMP
  4. D
    WPA2-Enterprise utilizing TACACS+ for centralized key exchange

Answer

WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
WPA3-Personal implements Simultaneous Authentication of Equals (SAE) in place of the static pre-shared key four-way handshake used in WPA2. SAE leverages a Dragonfly key exchange that mitigates offline dictionary attacks even when simple passphrases are used and delivers forward secrecy for session traffic without requiring 802.1X RADIUS servers.

Step-by-Step Solution

1
Analyze the technical requirements and constraints presented in the scenario.
The requirements specify mitigating offline dictionary attacks without implementing an 802.1X RADIUS infrastructure or client certificate management.
Identifying constraints eliminates both legacy vulnerable standards and complex enterprise authentication modes.
2
Evaluate wireless authentication protocols against the requirement set.
WPA3-Personal replaces the legacy WPA2 pre-shared key handshake with Simultaneous Authentication of Equals (SAE).
SAE incorporates the Dragonfly key exchange algorithm, which resists dictionary attacks and guarantees forward secrecy while retaining passphrase convenience.

Key Concept

WPA3-Personal SAE vs. WPA3-Enterprise RADIUS authentication mechanisms
Estimated Time:1m 15s
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic