Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network audit requires verifying that wireless security standards across company facilities are aligned with their correct cryptographic algorithms and integrity controls. Match each wireless security protocol on the left with its corresponding encryption cipher and integrity mechanism on the right.

  • WEPRC4 stream cipher with CRC-32 integrity check
  • WPA2-PersonalAES-CCMP encryption with CBC-MAC integrity check
  • WPA3-PersonalAES-CCMP-128 encryption with SAE key establishment
  • WPA3-Enterprise (192-bit mode)AES-GCMP-256 encryption with BIP-GMAC-256 integrity check

Answer

WEP pairs with RC4 stream cipher with CRC-32 integrity check; WPA2-Personal pairs with AES-CCMP encryption with CBC-MAC integrity check; WPA3-Personal pairs with AES-CCMP-128 encryption with SAE key establishment; WPA3-Enterprise (192-bit mode) pairs with AES-GCMP-256 encryption with BIP-GMAC-256 integrity check.
Each wireless security standard enforces distinct cipher suites and key management protocols: WEP pairs with RC4 and CRC-32; WPA2-Personal uses AES-CCMP with CBC-MAC; WPA3-Personal incorporates SAE alongside AES-CCMP-128; and WPA3-Enterprise 192-bit mode requires higher-strength AES-GCMP-256 and BIP-GMAC-256.

Step-by-Step Solution

1
Identify the cryptographic mechanism defined for legacy WEP.
WEP uses RC4 for encryption and CRC-32 for integrity.
WEP is an early 802.11 security mechanism notorious for initialization vector reuse and weak CRC-32 integrity checking.
2
Identify the encryption suite mandated by WPA2-Personal.
WPA2-Personal uses AES-CCMP, combining AES encryption with CBC-MAC for data integrity.
The IEEE 802.11i standard introduced CCMP to address the security flaws present in TKIP and WEP.
3
Identify the key exchange and cipher baseline for WPA3-Personal.
WPA3-Personal standardizes on AES-CCMP-128 for payload encryption and utilizes SAE for key exchange.
SAE provides forward secrecy and protects against offline dictionary attacks during pre-shared key handshakes.
4
Identify the enhanced 192-bit cryptographic suit mandated by WPA3-Enterprise high-security mode.
WPA3-Enterprise 192-bit mode requires AES-GCMP-256 payload encryption with BIP-GMAC-256 for management frame protection.
GCMP-256 provides authenticated encryption suitable for high-security commercial and government enterprise deployments.

Key Concept

Wireless Security Standards and Encryption Protocols
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic