Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network security engineer is updating an organization's wireless security baseline to transition branch offices to WPA3-Enterprise. The baseline mandates individual user credential validation integrated with central directory services and protection against wireless management frame spoofing attacks. Which of the following technical requirements must be included in the WPA3-Enterprise specification? (Select TWO).

  1. Implementation of IEEE 802.1X port-based authentication integrated with a central RADIUS serverAnswer
  2. B
    Requirement of Simultaneous Authentication of Equals (SAE) protocol for individual enterprise user authentication
  3. Mandatory deployment of Protected Management Frames (PMF) across all connected access points and clientsAnswer
  4. D
    Utilization of TACACS+ protocol at the access point level to encrypt the entire wireless frame payload during transport

Answer

The mandatory requirements for WPA3-Enterprise deployment are the implementation of IEEE 802.1X authentication integrated with a RADIUS server and the mandatory deployment of Protected Management Frames (PMF).
WPA3-Enterprise specifies IEEE 802.1X authentication using a RADIUS infrastructure for individual user identity validation. Additionally, the WPA3 standard makes Protected Management Frames (PMF) strictly mandatory to prevent malicious management frame injection and deauthentication attacks.

Step-by-Step Solution

1
Identify the authentication mechanism required for WPA3-Enterprise.
WPA3-Enterprise uses 802.1X port-based network access control with EAP protocols communicating to a backend RADIUS server.
Enterprise mode avoids shared keys by using centralized, individual credentials.
2
Identify the management protection requirement mandated in the WPA3 standard.
Protected Management Frames (PMF / IEEE 802.11w) are mandatory in WPA3.
PMF prevents deauthentication and disassociation spoofing attacks on wireless networks.

Key Concept

WPA3-Enterprise Requirements & Protected Management Frames
Estimated Time:1m 30s
Rate this question