Examkin

Question

Difficulty: HardWireless Security Standards and Encryption Protocols

A network security administrator is tasked with deploying a wireless network across a financial organization's operations center. Executive policy mandates strict compliance with 192-bit cryptographic strength for all payload encryption, mandatory Protected Management Frames (PMF), and centralized identity validation through a RADIUS infrastructure using digital certificates. Which wireless security suite and cipher implementation must the administrator select to satisfy all organizational security mandates?

  1. A
    WPA3-Personal operating with Simultaneous Authentication of Equals (SAE) and AES-CCMP-128
  2. WPA3-Enterprise 192-bit Mode using GCMP-256 cipher suite with EAP-TLS authenticationAnswer
  3. C
    WPA2-Enterprise with AES-CCMP-128 cipher suite and EAP-PEAP authentication
  4. D
    WPA3-Personal 192-bit Mode using TKIP encryption with EAP-FAST authentication

Answer

WPA3-Enterprise 192-bit Mode using GCMP-256 cipher suite with EAP-TLS authentication
WPA3-Enterprise 192-bit mode is specifically designed for high-security government and enterprise environments requiring robust protection. It mandates 256-bit Galois/Counter Mode Protocol (GCMP-256) encryption, SHA-384 message integrity check, 802.1X authentication using EAP-TLS with strong certificates, and mandatory Protected Management Frames (PMF).

Step-by-Step Solution

1
Analyze authentication requirements
Centralized authentication using digital certificates via RADIUS requires an 802.1X EAP architecture (such as EAP-TLS), which eliminates Personal/Pre-Shared Key (PSK/SAE) modes.
Enterprise modes use 802.1X/RADIUS, whereas Personal modes use pre-shared keys or passphrase-derived keys.
2
Evaluate cryptographic strength requirements
The requirement for 192-bit cryptographic security mandates the WPA3-Enterprise 192-bit Mode operating with GCMP-256.
Standard WPA2/WPA3 Enterprise typically uses 128-bit AES-CCMP, whereas 192-bit mode strictly uses 256-bit Galois/Counter Mode Protocol (GCMP-256) along with HMAC-SHA384 and ECDSA/RSA with strong key sizes.
3
Verify Protected Management Frames (PMF) compliance
WPA3 mandates Protected Management Frames (802.1w) across all operational profiles.
PMF protection prevents management frame spoofing and disassociation attacks.

Key Concept

WPA3 Wireless Security Modes and Cipher Suites
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic