Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

An IT manager is reviewing a proposed wireless network implementation for a corporate office. The security policy mandates individual user accountability through centralized 802.1X RADIUS authentication alongside mandatory Protected Management Frames. The installation team proposes deploying WPA3-Personal with a robust shared passphrase to streamline client onboarding. Which of the following statements best evaluates this proposal against the organization's requirements?

  1. The proposal fails to meet requirements because WPA3-Personal uses Simultaneous Authentication of Equals (SAE) with a shared passphrase rather than individual 802.1X user authentication.Answer
  2. B
    The proposal satisfies all requirements because WPA3-Personal natively integrates with RADIUS servers while enforcing mandatory Protected Management Frames.
  3. C
    The proposal fails to meet requirements because WPA3-Personal relies exclusively on TACACS+ for centralized authentication rather than RADIUS.
  4. D
    The proposal satisfies all requirements because WPA3-Personal enforces EAP-TLS authentication by default when paired with strong passphrases.

Answer

The proposal fails to meet requirements because WPA3-Personal uses Simultaneous Authentication of Equals (SAE) with a shared passphrase rather than individual 802.1X user authentication.
WPA3-Personal is designed for home and small office networks using Simultaneous Authentication of Equals (SAE) with a pre-shared passphrase. Because all clients share the same key, it cannot provide individual user accountability or integrate with 802.1X RADIUS authentication servers. Meeting the requirement for central user authentication requires WPA3-Enterprise.

Step-by-Step Solution

1
Identify the organization's key wireless security requirement
The requirement specifies centralized 802.1X RADIUS authentication for individual user accountability.
Enterprise security environments require unique credentials per user mapped to a central identity provider via RADIUS.
2
Evaluate the capabilities of the proposed WPA3-Personal standard
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) with a shared password across devices.
SAE provides strong key exchange for pre-shared key environments but does not support EAP/802.1X RADIUS authentication.
3
Determine the correct standard and conclusion
The team must deploy WPA3-Enterprise instead of WPA3-Personal.
WPA3-Enterprise is required to integrate 802.1X RADIUS authentication for unique user account identity verification.

Key Concept

WPA3-Personal vs. WPA3-Enterprise Authentication Requirements
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic