Question

Difficulty: HardWireless Security Standards and Encryption Protocols

A network security consultant is conducting an audit of an organization's multi-generational wireless network infrastructure. Match each wireless security requirement or vulnerability scenario to its corresponding cryptographic protocol or mechanism.

  • High-security corporate requirement enforcing WPA3 192-bit mode (Suite B compliance)Galois/Counter Mode Protocol with 256-bit key length (GCMP-256)
  • WPA3-Personal pre-shared key replacement designed to prevent offline dictionary attacksSimultaneous Authentication of Equals (SAE) based on Dragonfly key exchange
  • Standard WPA2 mandatory encryption cipher providing authenticated data encryptionCounter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  • Legacy WEP integrity check mechanism susceptible to unauthenticated message modificationCyclic Redundancy Check (CRC-32) Integrity Check Value

Answer

High-security WPA3 192-bit mode matches GCMP-256; WPA3-Personal pre-shared key replacement matches SAE; WPA2 mandatory encryption matches CCMP; Legacy WEP integrity check matches CRC-32.
WPA3 192-bit mode specifies GCMP-256 for top-tier government and enterprise security; WPA3-Personal utilizes SAE (Dragonfly) to protect passphrase-based connections; WPA2 relies on CCMP (AES-CCMP) for default confidentiality and integrity; WEP's integrity checksum relies on linear CRC-32 which is easily manipulated by attackers.

Step-by-Step Solution

1
Identify the cryptographic suite for WPA3 Enterprise 192-bit mode
WPA3 Enterprise 192-bit mode requires GCMP-256 (Galois/Counter Mode Protocol) and SHA-384.
High-security enterprise environments targeting CNSA compliance require 256-bit authenticated symmetric ciphers.
2
Identify the authentication protocol for WPA3-Personal
WPA3-Personal uses Simultaneous Authentication of Equals (SAE).
SAE provides forward secrecy and prevents password guessing via captured handshakes.
3
Identify the core cipher suite introduced as mandatory in IEEE 802.11i / WPA2
WPA2 mandates CCMP (AES in Counter Mode with CBC-MAC).
CCMP replaced vulnerable TKIP/RC4 mechanisms used in older standards.
4
Identify the integrity verification technique used in legacy WEP
WEP uses CRC-32 as an Integrity Check Value (ICV).
CRC-32 lacks cryptographic security properties, allowing attackers to flip bits undetected.

Key Concept

Wireless Security Standards and Encryption Protocols
Rate this question