Examkin

Question

Difficulty: HardWireless Security Standards and Encryption Protocols

A network security technician is configuring a secure wireless deployment for a financial institution's regional office. Organization policy requires individual user accounting and authentication against a central Active Directory infrastructure via a RADIUS server, along with enforced protection against deauthentication and management frame spoofing attacks. Which wireless security deployment standard and authentication combination fully satisfies these organization requirements?

  1. WPA3-Enterprise using 802.1X EAP authentication with mandatory Protected Management Frames (PMF)Answer
  2. B
    WPA3-Personal using Simultaneous Authentication of Equals (SAE) with mandatory Protected Management Frames (PMF)
  3. C
    WPA2-Enterprise using TACACS+ authentication with Counter Mode Cipher Block Chaining Message Authentication Code Protocol (CCMP)
  4. D
    WPA2-Personal using Pre-Shared Key (PSK) authentication with Temporal Key Integrity Protocol (TKIP) encryption

Answer

WPA3-Enterprise using 802.1X EAP authentication with mandatory Protected Management Frames (PMF)
WPA3-Enterprise incorporates 802.1X EAP to authenticate users individually against a backend RADIUS server connected to Active Directory. Additionally, the WPA3 specification mandates the implementation of Protected Management Frames (IEEE 802.11w / PMF), which encrypts and authenticates management frames to protect against wireless eavesdropping and spoofed disassociation/deauthentication denial-of-service attacks.

Step-by-Step Solution

1
Analyze authentication requirements
Centralized RADIUS integration and individual accounting require an 802.1X EAP enterprise mode rather than personal pre-shared keys or SAE.
Enterprise modes use 802.1X to pass authentication requests to a backend RADIUS server for individual identity validation.
2
Analyze management frame protection requirements
Protected Management Frames (PMF / IEEE 802.11w) are required to prevent spoofed deauthentication attacks.
WPA3 mandates PMF across all modes, whereas earlier standards made PMF optional.
3
Synthesize standard and protocol selection
Combining 802.1X EAP RADIUS authentication with mandatory PMF points directly to WPA3-Enterprise.
WPA3-Enterprise delivers both robust 802.1X/RADIUS enterprise access control and mandatory management frame protection.

Key Concept

Wireless Security Standards (WPA3-Enterprise vs Personal, 802.1X, PMF)
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic