Soru

Zorluk: OrtaWireless Security Standards and Encryption Protocols

A network technician is configuring a new standalone wireless access point using WPA3-Personal for a small branch office that lacks a centralized AAA/RADIUS infrastructure. Which of the following technical features are native capabilities of WPA3-Personal that directly enhance security compared to WPA2-Personal? (Select TWO.)

  1. Simultaneous Authentication of Equals (SAE) protocol to provide forward secrecy and resistance against offline dictionary attacks.Cevap
  2. Mandatory Protected Management Frames (PMF) to prevent rogue deauthentication and disassociation spoofing attacks.Cevap
  3. C
    Centralized 802.1X EAP-TLS authentication requiring individual digital certificates for user identity verification.
  4. D
    Temporal Key Integrity Protocol (TKIP) dynamic rekeying fallback to maintain backward compatibility with 802.11b clients.

Cevap

The native features of WPA3-Personal that enhance security over WPA2-Personal are Simultaneous Authentication of Equals (SAE) for forward secrecy and offline dictionary attack resistance, and mandatory Protected Management Frames (PMF) to protect against management frame spoofing.
WPA3-Personal significantly improves Wi-Fi security by replacing WPA2's PSK exchange with Simultaneous Authentication of Equals (SAE), a Diffie-Hellman-based key exchange protocol that prevents offline dictionary attacks even when weak passphrases are used. Additionally, WPA3 makes Protected Management Frames (PMF / 802.11w) mandatory, safeguarding management traffic such as deauthentication and disassociation frames from being spoofed by malicious actors.

Adım Adım Çözüm

1
Analyze the scenario constraints and requirements
The branch office lacks RADIUS infrastructure, meaning WPA3-Enterprise features are not applicable, focusing the analysis on WPA3-Personal enhancements.
WPA3-Personal is designed for environments without 802.1X/RADIUS servers.
2
Evaluate key WPA3-Personal security enhancements
SAE replaces PSK to defend against brute-force dictionary attacks, and PMF (IEEE 802.11w) becomes mandatory to block unauthenticated management frame attacks.
These two specifications constitute the defining technical security upgrades from WPA2-Personal to WPA3-Personal.

Anahtar Kavram

WPA3-Personal Security Enhancements (SAE and PMF)
Bu soruyu puanla