Examkin

Soru

Zorluk: OrtaWireless Security Protocols (WPA, WPA2, WPA3)

A network administrator needs to deploy a secure wireless LAN for a small branch office. The security policy dictates that wireless client authentication must prevent offline dictionary attacks against pre-shared credentials and enforce Protected Management Frames (PMF), while avoiding the deployment cost and complexity of an external RADIUS or AAA server. Which wireless security deployment mode meets all of these requirements?

  1. WPA3-Personal using Simultaneous Authentication of Equals (SAE)Cevap
  2. B
    WPA2-Personal using Pre-Shared Key (PSK) with CCMP encryption
  3. C
    WPA2-Enterprise using 802.1X authentication and EAP-FAST
  4. D
    WPA3-Enterprise operating in 192-bit security mode

Cevap

WPA3-Personal using Simultaneous Authentication of Equals (SAE)
WPA3-Personal uses Simultaneous Authentication of Equals (SAE), a peer-to-peer key exchange protocol based on the Dragonfly handshake. SAE prevents offline dictionary attacks even if weak passphrases are selected, provides forward secrecy, and mandates Protected Management Frames (PMF), fulfilling all requirements without requiring a RADIUS server.

Adım Adım Çözüm

1
Analyze deployment constraints
Requirements are offline dictionary attack protection, mandatory Protected Management Frames (PMF), and operating without an external RADIUS/AAA server.
Branch offices without dedicated AAA infrastructure require a personal/passphrase mode rather than an enterprise mode.
2
Evaluate key exchange mechanisms
WPA3-Personal introduces Simultaneous Authentication of Equals (SAE), based on the Dragonfly key exchange algorithm.
SAE provides forward secrecy and renders captured handshakes immune to offline dictionary attacks.
3
Verify compliance with PMF standards
PMF (IEEE 802.11w) is optional in WPA2 but strictly mandatory in all WPA3 modes.
Selecting WPA3-Personal SAE ensures both PMF compliance and non-RADIUS operation.

Anahtar Kavram

WPA3-Personal key exchange via SAE and mandatory Protected Management Frames
Bu soruyu puanla

Konular

Wireless Security Protocols (WPA, WPA2, WPA3)

Bu konudan daha fazla soru