Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is configuring a new wireless deployment for a corporate headquarters. The company's security policy requires each employee to authenticate using their individual domain credentials managed by a central RADIUS server, while ensuring robust encryption for all wireless traffic. Which wireless security configuration best fulfills these operational requirements?

  1. WPA3-Enterprise with 802.1X authentication and CCMP/GCMP encryptionAnswer
  2. B
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE) with a shared corporate passphrase
  3. C
    WPA2-Personal with TACACS+ server integration for pre-shared key distribution
  4. D
    WPA2-Enterprise configured with SNMPv2c community strings for credential validation

Answer

WPA3-Enterprise with 802.1X authentication and CCMP/GCMP encryption
WPA3-Enterprise utilizes 802.1X port-based network access control to pass authentication traffic between wireless clients and a RADIUS server, ensuring each user logs in with distinct credentials. It couples this with robust AES encryption (CCMP/GCMP) for data confidentiality.

Step-by-Step Solution

1
Identify the authentication requirement from the scenario
Individual user credentials authenticated via a central RADIUS server require an 802.1X solution (Enterprise mode).
Personal modes (PSK/SAE) use a single shared key across all endpoints, which fails to provide per-user accountability.
2
Identify the standard and encryption protocols that satisfy enterprise security guidelines
WPA3-Enterprise combined with 802.1X authentication and CCMP/GCMP symmetric encryption.
WPA3-Enterprise mandates 802.1X EAP-based authentication with 128-bit or 192-bit cryptographic strength.

Key Concept

Wireless Security Standards and Encryption Protocols
Rate this question