Examkin

Question

Difficulty: MediumWireless Security Standards and Encryption Protocols

A network administrator is designing a wireless deployment for a corporate branch office. Security policy mandates individual user accountability, centralized credential management using an existing 802.1X RADIUS infrastructure, and enterprise-grade encryption. A junior technician proposes deploying WPA3-Personal with Simultaneous Authentication of Equals (SAE) to avoid the administrative overhead of deploying and managing digital certificates on client devices. Which of the following best explains why the technician's proposal fails to satisfy the organizational security compliance baseline?

  1. WPA3-Personal utilizes Simultaneous Authentication of Equals (SAE) with a shared password, which does not provide individual user authentication or integrate with 802.1X RADIUS servers.Answer
  2. B
    WPA3-Personal automatically relays passphrase authentication requests to RADIUS servers but forces the network to use legacy TKIP encryption ciphers.
  3. C
    Centralized 802.1X user authentication requires TACACS+ infrastructure rather than RADIUS servers when authenticating wireless clients.
  4. D
    WPA3-Personal enables individual user auditing but is vulnerable to offline dictionary attacks due to its reliance on WPA2 four-way handshakes.

Answer

WPA3-Personal utilizes Simultaneous Authentication of Equals (SAE) with a shared password, which does not provide individual user authentication or integrate with 802.1X RADIUS servers.
The requirement for individual user accountability and 802.1X RADIUS integration necessitates WPA3-Enterprise. WPA3-Personal uses Simultaneous Authentication of Equals (SAE), which protects shared passphrases against dictionary attacks but still relies on a common secret among all users, rendering it incapable of providing individual user authentication or communicating with an 802.1X RADIUS server.

Step-by-Step Solution

1
Analyze organizational requirements
The scenario requires individual user accountability and centralized authentication integrated with an 802.1X RADIUS infrastructure.
Enterprise security baselines demand unique per-user accounting rather than shared access credentials.
2
Evaluate the proposed solution (WPA3-Personal with SAE)
WPA3-Personal uses SAE to secure pre-shared key (PSK) authentication across all connecting hosts using a single shared password.
SAE replaces the traditional PSK four-way handshake to protect against offline dictionary attacks, but it remains a personal mode reliant on a common passphrase.
3
Compare WPA3 modes against compliance mandates
Only WPA3-Enterprise supports 802.1X authentication framework integration with RADIUS servers for per-user credential validation.
WPA3-Personal cannot pass individual user identities or credentials to 802.1X/RADIUS servers.

Key Concept

WPA3-Personal vs. WPA3-Enterprise Authentication Mechanics
Rate this question

Topics

Wireless Security Standards and Encryption Protocols

More questions from this topic