Examkin

Soru

Zorluk: OrtaWireless Security and Authentication

An IT security consultant is upgrading the wireless infrastructure for a regional healthcare clinic. To ensure compliance with patient data privacy regulations, the new network must provide centralized authentication using unique user credentials rather than a shared passphrase, while enforcing mutual authentication to protect against rogue access point attacks. Which of the following security controls and authentication mechanisms should the consultant implement? (Select TWO.)

  1. WPA3-Enterprise operating with an 802.1X RADIUS serverCevap
  2. EAP-TLS authentication utilizing client and server digital certificatesCevap
  3. C
    WPA2-Personal configured with Simultaneous Authentication of Equals (SAE)
  4. D
    MAC address filtering combined with disabling SSID broadcast

Cevap

WPA3-Enterprise operating with an 802.1X RADIUS server, and EAP-TLS authentication utilizing client and server digital certificates.
WPA3-Enterprise combined with an 802.1X RADIUS server allows central user management and individual account authentication. Implementing EAP-TLS satisfies the mutual authentication requirement because both the server and client validate each other's digital certificates before establishing the encrypted session.

Adım Adım Çözüm

1
Identify the authentication requirement for individual credentials
Selecting WPA3-Enterprise (or WPA2-Enterprise) provides 802.1X integration with a central RADIUS server, ensuring individual user authentication instead of a shared passphrase.
Enterprise modes move away from Pre-Shared Keys (PSK) to central directory service authentication.
2
Identify the protocol requirement for mutual authentication against rogue access points
Selecting EAP-TLS enforces mutual authentication using digital certificates on both server and client.
EAP-TLS validates both the RADIUS server certificate on the client side and the client certificate on the server side, preventing connection to unauthorized rogue access points.

Anahtar Kavram

Enterprise Wireless Authentication and Mutual Security Controls
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Wireless Security and Authentication

Bu konudan daha fazla soru