Examkin

Soru

Zorluk: OrtaWireless Security Standards and Encryption Protocols

A network technician is configuring a newly established small office location. The security baseline mandates protection against offline dictionary password-cracking attacks while utilizing a shared secret for authentication, as well as requiring Protected Management Frames (PMF) to safeguard against wireless deauthentication attacks. Which wireless security deployment best fulfills these requirements?

  1. WPA3-Personal using Simultaneous Authentication of Equals (SAE)Cevap
  2. B
    WPA2-Personal using Pre-Shared Key (PSK) with TKIP encryption
  3. C
    WPA3-Enterprise using 802.1X RADIUS authentication with PSK fallback
  4. D
    WPA2-Enterprise using TACACS+ authentication and optional PMF

Cevap

WPA3-Personal using Simultaneous Authentication of Equals (SAE) is the correct deployment because it mandates Protected Management Frames (PMF) and utilizes SAE to mitigate offline dictionary attacks on shared credentials.
WPA3-Personal addresses key vulnerabilities of WPA2 by implementing Simultaneous Authentication of Equals (SAE), a cryptographic handshake that renders offline dictionary attacks ineffective. WPA3 standards also strictly enforce Protected Management Frames (PMF), preventing malicious actors from sending spoofed disconnect frames to wireless clients.

Adım Adım Çözüm

1
Analyze requirement 1: Protection against offline dictionary attacks using shared credentials
Identify that WPA3-Personal uses Simultaneous Authentication of Equals (SAE) based on Dragonfly Key Exchange to prevent offline dictionary attacks, unlike WPA2-Personal PSK.
WPA2-Personal four-way handshakes can be captured and cracked offline using brute-force/dictionary tools, whereas SAE prevents offline password guessing.
2
Analyze requirement 2: Mandatory Protected Management Frames (PMF)
Confirm that PMF (IEEE 802.11w) is required by default in WPA3 implementations.
PMF protects unicast and multicast management frames, preventing spoofed deauthentication and disassociation attacks.
3
Match combined requirements to options
Select WPA3-Personal with SAE.
It fulfills both the shared key authentication requirement with offline attack protection and mandatory PMF support.

Anahtar Kavram

Wireless Security Standards (WPA3-Personal SAE and PMF requirements)
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Wireless Security Standards and Encryption Protocols

Bu konudan daha fazla soru