Soru

Zorluk: OrtaWireless Security and Authentication

A systems administrator is configuring a wireless access point for corporate employees. To comply with internal security policies, the wireless network must enforce individual credential authentication integrated with the central Active Directory domain, while disallowing vulnerable legacy protocols like TKIP. Which of the following security configurations should the administrator implement?

  1. WPA3-Enterprise utilizing 802.1X authentication and RADIUSCevap
  2. B
    WPA2-Personal utilizing a Pre-Shared Key (PSK) with TKIP fallback
  3. C
    WPA3-Personal utilizing Simultaneous Authentication of Equals (SAE)
  4. D
    WPA2-Enterprise utilizing Wi-Fi Protected Setup (WPS) PIN authentication

Cevap

WPA3-Enterprise utilizing 802.1X authentication and RADIUS
WPA3-Enterprise requires an 802.1X RADIUS server infrastructure to authenticate users individually against central directory services like Active Directory. Furthermore, WPA3 enforces strong AES encryption standards, satisfying all security policy mandates.

Adım Adım Çözüm

1
Identify the authentication requirement
Individual domain credentials require an Enterprise security framework utilizing 802.1X and RADIUS rather than a shared passphrase.
Personal modes (PSK/SAE) share a single key among all users, preventing individual user accounting and domain integration.
2
Identify the encryption standard requirement
WPA3 mandates modern AES-based cipher suites (such as CCMP/GCMP) and disallows legacy TKIP.
TKIP has known cryptographic weaknesses and is deprecated across modern wireless security standards.
3
Select the matching configuration option
WPA3-Enterprise satisfies both individual authentication and secure encryption criteria.
It combines 802.1X network access control with strong mandatory AES encryption.

Anahtar Kavram

Enterprise Wireless Security (802.1X / RADIUS vs. Personal PSK/SAE)
Bu soruyu puanla