Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network technician is configuring a newly established small office location. The security baseline mandates protection against offline dictionary password-cracking attacks while utilizing a shared secret for authentication, as well as requiring Protected Management Frames (PMF) to safeguard against wireless deauthentication attacks. Which wireless security deployment best fulfills these requirements?

  1. WPA3-Personal using Simultaneous Authentication of Equals (SAE)Answer
  2. B
    WPA2-Personal using Pre-Shared Key (PSK) with TKIP encryption
  3. C
    WPA3-Enterprise using 802.1X RADIUS authentication with PSK fallback
  4. D
    WPA2-Enterprise using TACACS+ authentication and optional PMF

Answer

WPA3-Personal using Simultaneous Authentication of Equals (SAE) is the correct deployment because it mandates Protected Management Frames (PMF) and utilizes SAE to mitigate offline dictionary attacks on shared credentials.
WPA3-Personal addresses key vulnerabilities of WPA2 by implementing Simultaneous Authentication of Equals (SAE), a cryptographic handshake that renders offline dictionary attacks ineffective. WPA3 standards also strictly enforce Protected Management Frames (PMF), preventing malicious actors from sending spoofed disconnect frames to wireless clients.

Step-by-Step Solution

1
Analyze requirement 1: Protection against offline dictionary attacks using shared credentials
Identify that WPA3-Personal uses Simultaneous Authentication of Equals (SAE) based on Dragonfly Key Exchange to prevent offline dictionary attacks, unlike WPA2-Personal PSK.
WPA2-Personal four-way handshakes can be captured and cracked offline using brute-force/dictionary tools, whereas SAE prevents offline password guessing.
2
Analyze requirement 2: Mandatory Protected Management Frames (PMF)
Confirm that PMF (IEEE 802.11w) is required by default in WPA3 implementations.
PMF protects unicast and multicast management frames, preventing spoofed deauthentication and disassociation attacks.
3
Match combined requirements to options
Select WPA3-Personal with SAE.
It fulfills both the shared key authentication requirement with offline attack protection and mandatory PMF support.

Key Concept

Wireless Security Standards (WPA3-Personal SAE and PMF requirements)
Estimated Time:1m 15s
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic