Examkin

Soru

Zorluk: OrtaWireless Security Protocols (WPA, WPA2, WPA3)

A wireless network engineer is reviewing protocol requirements to transition an enterprise Wi-Fi infrastructure from WPA2 to WPA3 across corporate and guest SSIDs. Which TWO statements correctly describe key structural and operational differences between WPA3 and legacy WPA2 standards?

  1. WPA3-Personal mandates the use of Simultaneous Authentication of Equals (SAE) for initial key exchange to mitigate offline password guessing and dictionary attacks.Cevap
  2. B
    WPA3-Enterprise deprecates 802.1X/EAP authentication frameworks, replacing them with centralized RADIUS pre-shared key management.
  3. Protected Management Frames (PMF / IEEE 802.11w) are strictly mandatory for all native WPA3 connections.Cevap
  4. D
    WPA3 uses Temporal Key Integrity Protocol (TKIP) as its primary encryption cipher to maintain backward compatibility with legacy 802.11a/b/g devices.

Cevap

The correct statements are that WPA3-Personal mandates Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks, and Protected Management Frames (PMF) are mandatory across all native WPA3 network connections.
WPA3 introduces key improvements over WPA2: Simultaneous Authentication of Equals (SAE) replaces WPA2-Personal's Pre-Shared Key (PSK) 4-way handshake to protect against offline dictionary attacks and provide forward secrecy. Additionally, Protected Management Frames (PMF / IEEE 802.11w) are mandatory across all native WPA3 network connections to secure control and management traffic against spoofing.

Adım Adım Çözüm

1
Analyze WPA3-Personal key exchange mechanisms
Identified that WPA3-Personal uses Dragonfly/SAE (Simultaneous Authentication of Equals) instead of the WPA2 PSK 4-way handshake, preventing offline dictionary attacks.
SAE provides forward secrecy and protects authentication exchanges even when weak passwords are chosen.
2
Evaluate WPA3 Management Frame Protection requirements
Confirmed that IEEE 802.11w Protected Management Frames (PMF) are negotiated as required (mandatory) in WPA3 mode.
PMF shields unicast and multicast management frames against deauthentication and disassociation spoofing.
3
Verify legacy cipher and enterprise framework compatibility
Disproved claims that WPA3 uses TKIP or removes 802.1X.
TKIP is explicitly forbidden in WPA3 due to security vulnerabilities, and WPA3-Enterprise retains 802.1X/EAP.

Anahtar Kavram

WPA3 Security Enhancements (SAE and Mandatory PMF)
Bu soruyu puanla

Konular

Wireless Security Protocols (WPA, WPA2, WPA3)

Bu konudan daha fazla soru