Examkin

Soru

Zorluk: OrtaWireless Security Standards and Encryption Protocols

A security engineer is updating an organization's wireless baseline documentation to prepare for a migration from legacy Wi-Fi security protocols to WPA3-Enterprise across all corporate facilities. Which of the following technical features and requirements specifically apply when implementing WPA3-Enterprise? (Select TWO)

  1. Mandatory implementation of Protected Management Frames (PMF) to safeguard unicast and multicast management actions against eavesdropping and spoofingCevap
  2. Availability of an optional 192-bit cryptographic security suite utilizing 256-bit Galois/Counter Mode Protocol (GCMP-256) for high-security environmentsCevap
  3. C
    Implementation of Simultaneous Authentication of Equals (SAE) to establish user session credentials dynamically via RADIUS servers
  4. D
    Utilization of a single static Pre-Shared Key (PSK) combined with AES-CCMP128 to authenticate individual domain users

Cevap

The transition to WPA3-Enterprise mandates Protected Management Frames (PMF) and introduces support for an optional 192-bit security mode using GCMP-256.
WPA3 requires Protected Management Frames (PMF) across all variants to defend against disassociation/deauthentication spoofing, and WPA3-Enterprise includes an optional 192-bit mode using GCMP-256 for enhanced data confidentiality.

Adım Adım Çözüm

1
Analyze WPA3 baseline mandates.
PMF (IEEE 802.11w) is mandatory in WPA3 (both Personal and Enterprise modes), ensuring management frame integrity and protection against deauthentication spoofing.
WPA3 enforces PMF to mitigate wireless management frame attacks.
2
Evaluate WPA3-Enterprise specific cryptographic options.
WPA3-Enterprise supports an enhanced 192-bit security suite using GCMP-256 encryption for mission-critical environment baselines.
GCMP-256 and HMAC-SHA384 provide higher cryptographic assurance required for enterprise environments.
3
Distinguish authentication protocols between Personal and Enterprise modes.
SAE and PSK belong to personal/pre-shared key modes, whereas Enterprise mode utilizes 802.1X framework with EAP authentication types.
Confusing SAE (Personal) with 802.1X RADIUS (Enterprise) misidentifies the underlying authentication architecture.

Anahtar Kavram

WPA3-Enterprise Security Standards and Cryptographic Suites
Bu soruyu puanla

Konular

Wireless Security Standards and Encryption Protocols

Bu konudan daha fazla soru