A network technician is configuring a new standalone wireless access point using WPA3-Personal for a small branch office that lacks a centralized AAA/RADIUS infrastructure. Which of the following technical features are native capabilities of WPA3-Personal that directly enhance security compared to WPA2-Personal? (Select TWO.)
- Simultaneous Authentication of Equals (SAE) protocol to provide forward secrecy and resistance against offline dictionary attacks.Cevap
- Mandatory Protected Management Frames (PMF) to prevent rogue deauthentication and disassociation spoofing attacks.Cevap
- CCentralized 802.1X EAP-TLS authentication requiring individual digital certificates for user identity verification.
- DTemporal Key Integrity Protocol (TKIP) dynamic rekeying fallback to maintain backward compatibility with 802.11b clients.
Cevap
The native features of WPA3-Personal that enhance security over WPA2-Personal are Simultaneous Authentication of Equals (SAE) for forward secrecy and offline dictionary attack resistance, and mandatory Protected Management Frames (PMF) to protect against management frame spoofing.
WPA3-Personal significantly improves Wi-Fi security by replacing WPA2's PSK exchange with Simultaneous Authentication of Equals (SAE), a Diffie-Hellman-based key exchange protocol that prevents offline dictionary attacks even when weak passphrases are used. Additionally, WPA3 makes Protected Management Frames (PMF / 802.11w) mandatory, safeguarding management traffic such as deauthentication and disassociation frames from being spoofed by malicious actors.
Adım Adım Çözüm
Anahtar Kavram
WPA3-Personal Security Enhancements (SAE and PMF)