Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is configuring a public Wi-Fi network for a city airport terminal. Corporate policy mandates that passenger data transmitted over the wireless medium must be encrypted individually per session to prevent passive eavesdropping, but the system must not require user registration, passwords, or authentication credentials. Which wireless security standard or feature should the administrator implement?

  1. Opportunistic Wireless Encryption (OWE)Answer
  2. B
    WPA3-Personal using Simultaneous Authentication of Equals (SAE)
  3. C
    WPA3-Enterprise using 802.1X RADIUS authentication
  4. D
    WPA2-Personal using Pre-Shared Key (PSK) with TKIP

Answer

Opportunistic Wireless Encryption (OWE)
Opportunistic Wireless Encryption (OWE) enables wireless access points and client devices to perform an unauthenticated Diffie-Hellman key exchange. This generates unique session keys for encrypting over-the-air traffic for each client on open networks without requiring passwords or authentication credentials.

Step-by-Step Solution

1
Analyze the access and encryption requirements stated in the scenario
The network requires per-session over-the-air data encryption without requiring users to input authentication credentials or shared passphrases.
Public access networks need friction-free onboarding while still protecting user traffic from local wireless eavesdropping.
2
Evaluate candidate wireless security protocols against authentication and encryption specifications
Opportunistic Wireless Encryption (OWE) uses Diffie-Hellman key exchange to establish unique per-client encryption keys dynamically without requiring user authentication.
OWE fulfills the requirement for encrypted open access, whereas WPA3-Personal (SAE) and WPA3-Enterprise (802.1X/RADIUS) both require authentication credentials.

Key Concept

Opportunistic Wireless Encryption (OWE) for unauthenticated public Wi-Fi encryption
Rate this question