Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is configuring a new wireless network for a corporate branch office. Company security policy mandates that every employee must authenticate using their individual domain accounts against a centralized RADIUS server, preventing the use of a shared network passphrase. Which WPA3 security mode and authentication mechanism should the administrator configure on the Wireless LAN Controller (WLC)?

  1. A
    WPA3-Personal using Simultaneous Authentication of Equals (SAE)
  2. WPA3-Enterprise using 802.1X RADIUS authenticationAnswer
  3. C
    WPA3-Enterprise using Pre-Shared Key (PSK) authentication
  4. D
    WPA3-Personal using TACACS+ authentication protocol

Answer

WPA3-Enterprise using 802.1X RADIUS authentication
The correct option is WPA3-Enterprise using 802.1X RADIUS authentication because WPA3-Enterprise relies on the 802.1X framework to pass user credentials to an external AAA RADIUS server, fulfilling the requirement for individual user login via domain accounts.

Step-by-Step Solution

1
Identify the authentication requirement from the scenario.
The requirement mandates individual employee authentication via centralized domain accounts and a RADIUS server, excluding shared passwords.
Different wireless security modes determine whether access is granted via a shared credential or unique user identities.
2
Compare WPA3 security modes.
WPA3-Personal uses Simultaneous Authentication of Equals (SAE) for shared passphrases, whereas WPA3-Enterprise integrates with 802.1X and RADIUS servers.
Enterprise networks requiring individual user auditing and credential management depend on 802.1X framework integration.
3
Select the option that correctly pairs the enterprise mode with 802.1X RADIUS.
WPA3-Enterprise using 802.1X RADIUS authentication meets all criteria.
This combination ensures user-level authentication and dynamic key generation for each connected station.

Key Concept

WPA3 Enterprise vs. Personal Modes and 802.1X RADIUS Authentication
Rate this question