Examkin

Soru

Zorluk: OrtaWireless Security and Authentication

A network administrator is configuring a wireless network for a university research lab. The institution's security policy requires individual user authentication against a centralized directory service and strong AES encryption for all wireless traffic. Which TWO of the following configurations must the administrator implement on the wireless access points to fulfill these security requirements?

  1. WPA3-Enterprise security modeCevap
  2. 802.1X port-based authentication pointing to a RADIUS serverCevap
  3. C
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Personal utilizing TKIP encryption

Cevap

The administrator must select WPA3-Enterprise security mode and configure 802.1X port-based authentication pointing to a RADIUS server.
To meet the mandate for individual user authentication via a central directory along with strong AES encryption, the administrator must configure WPA3-Enterprise mode and implement 802.1X port-based authentication pointing to a RADIUS server. Enterprise wireless modes rely on 802.1X to relay authentication requests to a backend authentication server (such as RADIUS connected to Active Directory) and leverage modern AES encryption algorithms.

Adım Adım Çözüm

1
Analyze authentication requirements
The requirement calls for centralized, individual user authentication rather than a shared passphrase, requiring Enterprise mode (802.1X) connected to a RADIUS server.
Personal modes (PSK/SAE) rely on a single shared key across all devices, failing the centralized individual credential requirement.
2
Analyze encryption requirements
Strong AES encryption must be selected (CCMP/GCMP).
TKIP is deprecated and vulnerable, whereas WPA3-Enterprise mandates robust AES-based encryption algorithms.

Anahtar Kavram

WPA3-Enterprise and 802.1X/RADIUS for centralized wireless security
Bu soruyu puanla

Konular

Wireless Security and Authentication

Bu konudan daha fazla soru