A network security architect is defining wireless encryption and key negotiation baselines across multiple enterprise operating environments. Match each wireless security mode on the left with its corresponding mandatory cipher suite, authentication framework, and integrity mechanism on the right.
- WPA3-Enterprise 192-bit Mode (CNSA Suite)Galois/Counter Mode Protocol 256-bit (GCMP-256) with HMAC-SHA384 integrity and Elliptic Curve Diffie-Hellman (ECDH) over curve P-384 key exchange
- WPA3-PersonalAES-CCMP-128 encryption utilizing the Dragonfly handshake (Simultaneous Authentication of Equals) to provide forward secrecy
- WPA2-EnterpriseAES-CCMP-128 encryption combined with 802.1X/EAP RADIUS authentication and optional Protected Management Frames (PMF)
- WPA2-Personal (Legacy TKIP Mode)RC4 stream cipher wrapped in Temporal Key Integrity Protocol with Michael Message Integrity Check (MIC)
Answer
WPA3-Enterprise 192-bit Mode matches GCMP-256 with HMAC-SHA384 and ECDH P-384. WPA3-Personal matches AES-CCMP-128 with the Dragonfly handshake (SAE). WPA2-Enterprise matches AES-CCMP-128 with 802.1X/EAP RADIUS authentication. WPA2-Personal (Legacy TKIP Mode) matches the RC4 stream cipher with TKIP and Michael MIC.
Each wireless security standard relies on distinct encryption ciphers, integrity algorithms, and key exchange/authentication frameworks. WPA3-Enterprise 192-bit mode mandates the CNSA suite (GCMP-256, HMAC-SHA384, ECDH P-384). WPA3-Personal uses Dragonfly (SAE) with AES-CCMP-128. WPA2-Enterprise leverages 802.1X/EAP with AES-CCMP-128, and legacy WPA2-TKIP uses RC4 with Michael MIC.
Step-by-Step Solution
Key Concept
Wireless Security Standards and Encryption Protocols
Estimated Time:2m 0s