Examkin

Question

Difficulty: HardWireless Security Standards and Encryption Protocols

A system architect is upgrading a research organization's WLAN infrastructure to protect sensitive data transfers. The security policy mandates centralized per-user authentication integrated with an identity provider, mutual authentication between clients and RADIUS servers, and resistance against credential theft via offline dictionary attacks. Which of the following technical requirements and protocol implementations must be selected to satisfy this policy? (Select TWO.)

  1. Implementation of WPA3-Enterprise mode operating with 802.1X framework for centralized identity managementAnswer
  2. Deployment of Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) using X.509 digital certificatesAnswer
  3. C
    Configuration of WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE) with a shared complex passphrase
  4. D
    Use of Protected EAP with MS-CHAPv2 (PEAP-MSCHAPv2) configured with static WEP keys for legacy client compatibility

Answer

The organization must implement WPA3-Enterprise mode with 802.1X and deploy EAP-TLS authentication with digital certificates.
WPA3-Enterprise enforces the 802.1X port-based network access control framework, allowing user authentication against centralized directory services like Active Directory via RADIUS. Combining this with EAP-TLS delivers mutual authentication through X.509 digital certificates, ensuring both client and network identity are validated while rendering offline dictionary attacks ineffective.

Step-by-Step Solution

1
Analyze the identity and authentication requirements
Centralized per-user authentication requires an 802.1X framework and RADIUS server, which is provided by WPA3-Enterprise rather than pre-shared key modes.
WPA3-Personal relies on a single shared secret across clients, whereas WPA3-Enterprise delegates authentication to a central directory service.
2
Evaluate protocol mechanisms for mutual authentication and dictionary attack prevention
EAP-TLS mandates asymmetric cryptography with PKI certificates on both client and server sides.
By eliminating password-only authentication exchanges, EAP-TLS provides robust mutual authentication and prevents offline dictionary attacks against user credentials.

Key Concept

WPA3-Enterprise Architecture and EAP-TLS Mutual Authentication
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic