A network security engineer is updating an organization's wireless security baseline to transition branch offices to WPA3-Enterprise. The baseline mandates individual user credential validation integrated with central directory services and protection against wireless management frame spoofing attacks. Which of the following technical requirements must be included in the WPA3-Enterprise specification? (Select TWO).
- Implementation of IEEE 802.1X port-based authentication integrated with a central RADIUS serverAnswer
- BRequirement of Simultaneous Authentication of Equals (SAE) protocol for individual enterprise user authentication
- Mandatory deployment of Protected Management Frames (PMF) across all connected access points and clientsAnswer
- DUtilization of TACACS+ protocol at the access point level to encrypt the entire wireless frame payload during transport
Answer
The mandatory requirements for WPA3-Enterprise deployment are the implementation of IEEE 802.1X authentication integrated with a RADIUS server and the mandatory deployment of Protected Management Frames (PMF).
WPA3-Enterprise specifies IEEE 802.1X authentication using a RADIUS infrastructure for individual user identity validation. Additionally, the WPA3 standard makes Protected Management Frames (PMF) strictly mandatory to prevent malicious management frame injection and deauthentication attacks.
Step-by-Step Solution
Key Concept
WPA3-Enterprise Requirements & Protected Management Frames
Estimated Time:1m 30s