Examkin

Question

Difficulty: EasyWireless Security Standards and Encryption Protocols

A network administrator is upgrading a small office wireless access point from WPA2-Personal to WPA3-Personal. Which TWO of the following capabilities are standard security enhancements introduced by WPA3-Personal?

  1. Simultaneous Authentication of Equals (SAE) to mitigate offline dictionary attacksAnswer
  2. Mandatory Protected Management Frames (PMF) to safeguard control and management trafficAnswer
  3. C
    Mandatory deployment of a centralized 802.1X RADIUS server for user authentication
  4. D
    Fall-back to Temporal Key Integrity Protocol (TKIP) for legacy encryption backward compatibility

Answer

The two correct enhancements introduced by WPA3-Personal are Simultaneous Authentication of Equals (SAE) to mitigate offline dictionary attacks and mandatory Protected Management Frames (PMF) to safeguard control and management traffic.
WPA3-Personal improves wireless security over WPA2-Personal by implementing Simultaneous Authentication of Equals (SAE) to block offline password guessing attacks and by requiring Protected Management Frames (PMF) to protect management packets from spoofing.

Step-by-Step Solution

1
Identify the features specific to WPA3-Personal mode compared to WPA2-Personal.
WPA3-Personal replaces PSK with SAE (Dragonfly handshake) to stop offline dictionary attacks.
SAE ensures that key establishment requires active interaction, preventing attackers from capturing handshakes for brute-force analysis.
2
Evaluate the management frame requirement for WPA3.
Protected Management Frames (PMF) are strictly enforced in WPA3.
PMF prevents spoofed deauthentication/disassociation attacks that were common in earlier Wi-Fi standards.
3
Distinguish Personal features from Enterprise requirements and deprecated protocols.
802.1X RADIUS authentication applies to Enterprise modes, while TKIP is completely deprecated.
Personal mode relies on shared secrets rather than RADIUS servers, and TKIP is insecure.

Key Concept

WPA3-Personal Security Enhancements (SAE and PMF)
Estimated Time:1m 0s
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic