Examkin

Soru

Zorluk: OrtaWireless Security and Authentication

A network technician is configuring a SOHO wireless router for a small law firm. The firm wants to upgrade its wireless security to protect against offline password dictionary attacks and packet eavesdropping, but lacks the infrastructure to deploy a RADIUS server for central authentication. Which of the following wireless security standards should the technician implement?

  1. WPA3-PersonalCevap
  2. B
    WPA2-Personal
  3. C
    WPA2-Enterprise
  4. D
    WPA-TKIP

Cevap

WPA3-Personal should be implemented because it utilizes Simultaneous Authentication of Equals (SAE) to protect against offline dictionary attacks while operating in pre-shared key mode without requiring a RADIUS server.
WPA3-Personal introduces Simultaneous Authentication of Equals (SAE) to replace the Pre-Shared Key (PSK) mechanism. SAE ensures forward secrecy and prevents offline dictionary attacks against captured handshake frames, fulfilling the firm's security goals without requiring an 802.1X/RADIUS server deployment.

Adım Adım Çözüm

1
Analyze the scenario constraints and security objectives
The firm requires protection against offline dictionary attacks without deploying a RADIUS server.
SOHO environments without centralized AAA servers cannot implement 802.1X/Enterprise authentication modes.
2
Evaluate candidate wireless security standards
WPA3-Personal replaces the traditional WPA2 Pre-Shared Key (PSK) 4-way handshake with Simultaneous Authentication of Equals (SAE).
SAE prevents offline dictionary cracking even if a passphrase is weak, fulfilling both security and infrastructure requirements.

Anahtar Kavram

WPA3-Personal authentication mechanisms and Simultaneous Authentication of Equals (SAE)
Bu soruyu puanla

Konular

Wireless Security and Authentication

Bu konudan daha fazla soru