Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is designing a wireless infrastructure upgrade to implement WPA3-Enterprise across corporate headquarters. The design must ensure individual user accountability, centralized authentication, and protection against management frame spoofing attacks. Which of the following technical specifications and security mechanisms are required for this deployment? (Select TWO.)

  1. 802.1X authentication integrated with a RADIUS server for centralized credential validationAnswer
  2. Mandatory Protected Management Frames (PMF / 802.11w) enabled for all connecting clientsAnswer
  3. C
    Simultaneous Authentication of Equals (SAE) protocol for initial key exchange
  4. D
    Temporal Key Integrity Protocol (TKIP) dynamic key rotation for legacy client fallback

Answer

The required components for a WPA3-Enterprise implementation are 802.1X authentication integrated with a RADIUS server and mandatory Protected Management Frames (PMF).
WPA3-Enterprise requires 802.1X RADIUS authentication to manage distinct user credentials centrally and mandates Protected Management Frames (PMF) to safeguard network management frames against tampering and disassociation attacks.

Step-by-Step Solution

1
Identify the authentication requirements of WPA3-Enterprise
Recognize that WPA3-Enterprise mandates 802.1X EAP-based authentication backed by a RADIUS server rather than Pre-Shared Keys.
Enterprise wireless security requires centralized account control and unique per-user authentication.
2
Identify mandatory WPA3 baseline security features
Determine that Protected Management Frames (PMF / 802.11w) are required across all WPA3 implementations.
PMF protects unicast and multicast management frames against spoofing and denial-of-service attacks.
3
Differentiate WPA3-Personal from WPA3-Enterprise features
Exclude SAE key exchange and legacy TKIP ciphers.
SAE is exclusive to WPA3-Personal PSK replacements, and TKIP is explicitly forbidden in modern WPA3 specifications.

Key Concept

WPA3-Enterprise Architecture and Baseline Security Requirements
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic