Examkin

Soru

Zorluk: Çok zorWireless Security Protocols (WPA, WPA2, WPA3)

A wireless network architect is reviewing enterprise security standards to align wireless LAN controller (WLC) profiles with IEEE 802.11 security specifications. Match each wireless security implementation on the left with its corresponding key exchange mechanism, cipher suite, or framing requirement on the right.

  • WPA2-Personal Key ExchangeStandard 4-Way Handshake deriving a Pairwise Transient Key (PTK) directly from a static Pre-Shared Key (PSK), vulnerable to offline brute-force cracking if weak passphrases are chosen.
  • WPA3-Personal Key ExchangeSimultaneous Authentication of Equals (SAE) based on Dragonfly handshake providing forward secrecy and resistance to offline dictionary attacks.
  • WPA3-Enterprise 192-bit Security ModeGCMP-256 cipher suite paired with BIP-GMAC-256 for integrity protection and mandatory Protected Management Frames (PMF / IEEE 802.11w).
  • WPA2-Enterprise Core ArchitectureIEEE 802.1X port-based access control leveraging dynamic EAP authentication with a centralized RADIUS server to generate per-session Pairwise Master Keys (PMK).

Cevap

WPA2-Personal Key Exchange matches the standard 4-Way Handshake utilizing a static Pre-Shared Key (PSK); WPA3-Personal Key Exchange matches Simultaneous Authentication of Equals (SAE) via Dragonfly handshake; WPA3-Enterprise 192-bit Security Mode matches GCMP-256 with mandatory BIP-GMAC-256 Protected Management Frames; WPA2-Enterprise Core Architecture matches IEEE 802.1X framework with dynamic EAP/RADIUS authentication.
Each wireless security protocol implementation correctly pairs with its key exchange protocol, authentication framework, and cipher suite requirements according to IEEE 802.11i and 802.11ax standards.

Adım Adım Çözüm

1
Analyze WPA2-Personal authentication and encryption mechanics.
Identify that WPA2-Personal relies on a Pre-Shared Key (PSK) converted via PBKDF2 into a static PMK, which undergoes a 4-Way Handshake to establish the PTK.
Understanding the vulnerability of WPA2-Personal to passive capture and offline dictionary cracking helps distinguish it from SAE.
2
Analyze WPA3-Personal key exchange enhancements over WPA2.
Identify that WPA3-Personal introduces Simultaneous Authentication of Equals (SAE) using the Dragonfly key exchange protocol.
SAE prevents dictionary attacks by requiring interactive proof of password knowledge without transmitting password derivatives directly usable in offline calculation.
3
Evaluate WPA3-Enterprise 192-bit mode cryptographic primitives.
Confirm requirement of 256-bit symmetric encryption using GCMP-256 and BIP-GMAC-256 for management frame protection.
192-bit mode aligns with NSA Commercial National Security Algorithm (CNSA) suite specifications, upgrading from CCMP-128.
4
Differentiate Enterprise authentication models from Personal authentication models.
Associate 802.1X, EAP types (PEAP, EAP-TLS, EAP-FAST), and RADIUS integration with enterprise mode.
Enterprise implementations utilize centralized identity stores and dynamic key generation rather than shared static credentials.

Anahtar Kavram

Wireless Security Protocols, Authentication Frameworks, and Cipher Suites (WPA2/WPA3 Personal vs Enterprise)
Bu soruyu puanla

Konular

Wireless Security Protocols (WPA, WPA2, WPA3)

Bu konudan daha fazla soru