Examkin

Question

Difficulty: HardWireless Security Standards and Encryption Protocols

A network administrator is designing a wireless security architecture for an enterprise office. The organizational policy mandates centralized user authentication using 802.1X/RADIUS, individual credential accounting, and strict enterprise-grade encryption key management. A junior technician proposes implementing WPA3-Personal with Simultaneous Authentication of Equals (SAE) using a complex 30-character passphrase, arguing it avoids RADIUS server deployment while providing equal security. Which of the following best evaluates the junior technician's proposal?

  1. The proposal is invalid because WPA3-Personal uses a single shared password, failing to provide centralized 802.1X RADIUS authentication and individual user accounting.Answer
  2. B
    The proposal is valid because WPA3-Personal automatically negotiates 802.1X EAP user authentication behind the scenes when a complex passphrase is used.
  3. C
    The proposal is invalid because WPA3-Personal defaults to insecure TKIP encryption rather than AES-CCMP or GCMP cipher suites.
  4. D
    The proposal is valid because SAE dynamically generates unique per-user Active Directory login tokens without requiring a central authentication server.

Answer

The proposal is invalid because WPA3-Personal uses a single shared password, failing to provide centralized 802.1X RADIUS authentication and individual user accounting.
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) to establish secure connections using a pre-shared passphrase. Although SAE protects against offline brute-force attacks, it relies on a shared secret across endpoints and does not support individual user credentials, 802.1X/EAP frameworks, or RADIUS server integration. Enterprise environments requiring central identity management and accounting must deploy WPA3-Enterprise.

Step-by-Step Solution

1
Identify the organizational requirements
Requirements specify centralized 802.1X/RADIUS authentication, individual user accounting, and enterprise key management.
Enterprise security frameworks require individual accountability and integration with central identity providers like Active Directory via RADIUS.
2
Analyze the proposed solution (WPA3-Personal with SAE)
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) with a pre-shared key/passphrase.
While SAE prevents offline dictionary attacks and provides forward secrecy, all users share the same passphrase, and no 802.1X EAP exchange takes place.
3
Compare WPA3-Personal capabilities against requirements
WPA3-Personal fails to meet the requirement for individual authentication and 802.1X/RADIUS integration.
WPA3-Enterprise is required whenever individual credentials and RADIUS integration are mandated.

Key Concept

WPA3-Personal vs. WPA3-Enterprise Authentication Modes
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic